Enterprise Principal Technology Analyst (Cybersecurity Operations Manager)

We need to output HTML fragment with sections: About the role? Actually we have content: About The Department (department description). Position Duties (duties). Minimum Qualifications (education/experience). Other Qualifications (competencies). Salary Information (salary range). Also note hybrid telework schedule (Schedule). Benefits? Not mentioned. So we include sections: About the Department (maybe heading About the Department). Responsibilities (Position Duties). Requirements (Minimum Qualifications). Qualifications (Other Qualifications). Pay (Salary Information). Schedule (hybrid telework). Ensure we don't repeat job title. No filler. Use

for each heading. Use

• for lists. Use

  for prose. We need to preserve all substantive info. Remove boilerplate: EEO, accommodation contact, navigation, etc. Also remove "Visit here to learn more..." etc. Also remove "NOTE – The first review of applications will be on September 28,2026..." etc (application instructions). Also remove "Please note that the Cybersecurity Operations Manager position is currently eligible for a hybrid telework schedule. The schedule for working remotely and onsite is subject to change." That's schedule info, keep. We need to keep salary range and note about 5% ongoing non-pensionable compensation. We need to keep "The final candidate’s qualifications and experience shall determine the actual salary." plus range. We need to keep "In addition to the starting salary, employees in the Enterprise Principal Technology Analyst (EPTA) classification shall also receive an approximate five percent (5%) ongoing non-pensionable compensation pay." We need to keep Minimum Qualifications text. We need to keep Other Qualifications (the ideal candidate will possess the following competencies...). The text cuts off at "as demonstrated in past and current employmen". Likely truncated but we keep as is. We need to keep Position Duties list (key duties include but are not limited to: ...). We'll turn that into

  . We need to keep the earlier paragraphs describing duties (the prose before the list). We'll keep as

  . We need to keep the department description paragraphs. We need to keep the "About The Department" heading. We need to ensure we don't include headings with empty content. Let's craft HTML:

  About the Department

  ... (department description)

  Responsibilities

  ... (position duties prose before list)

  • Provide hands-on technical leadership, mentoring, prioritization, and quality assurance while coordinating with infrastructure, network, endpoint, cloud, application, identity, and service desk teams to reduce enterprise cybersecurity risk.
  ... etc each bullet.

  Requirements

  ... Minimum Qualifications text (Education and Experience: ... Acceptable Substitution: ... Completion of a Master's Degree ...)

  Qualifications

  ... Other Qualifications text (The ideal candidate will possess the following competencies, as demonstrated in past and current employmen)

  Pay

  ... Salary Information: The final candidate’s qualifications and experience shall determine the actual salary. In addition to the starting salary, employees in the Enterprise Principal Technology Analyst (EPTA) classification shall also receive an approximate five percent (5%) ongoing non-pensionable compensation pay. Salary Range $163,035.60 – $198,525.60

  Schedule

  Please note that the Cybersecurity Operations Manager position is currently eligible for a hybrid telework schedule. The schedule for working remotely and onsite is subject to change.

  Make sure no extra whitespace issues. Let's extract the department description text: "Our diverse and inclusive workforce of more than 7,000 employees play a key role in the success of San José, the heart of the Silicon Valley. All City of San José employees work together as one team to make San José a vibrant, innovative, and desirable place to live and work. Visit here to learn more about our One Team Leadership Values and Expectations, including quality and excellent customer service and here to learn more about San José." We need to remove the "Visit here..." lines (boilerplate). So we keep first two sentences only? Actually the instruction: Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. The "Visit here to learn more about our One Team Leadership Values and Expectations, including quality and excellent customer service and here to learn more about San José." seems like navigation/link boilerplate. So remove that. Keep the first two sentences. Then after that we have "The City of San José is an equal opportunity employer...." That's EEO boilerplate, remove. Then "The City of San José is committed to offering reasonable accommodations..." remove. Then "About The Department The City of San José innovates to provide exceptional civic services using advanced technologies to help our community thrive. As one of the largest cities in the nation, the City manages a large set of services and assets and operates on a budget of $6.2 billion, with approximately 7,000 employees, serving about 1 million residents and 80,000 businesses in the heart of Silicon Valley. The Information Technology Department’s (ITD) mission is to enrich the quality of life in San José through innovation, collaboration, and engagement. ITD enables that mission through business and infrastructure systems, cybersecurity, data management and analysis, responsible use of Artificial Intelligence (AI), productivity and collaboration tools, the San José 311 resident experience platform, data equity and privacy programs, and strategic planning. San José is powered by truly great people, a robust technology environment, and a strong sense of purpose. The IT department is a leader in innovation, embracing cutting-edge technologies and pioneering solutions to enhance efficiency and quality of life in San José. As part of this effort, the City leads a national initiative for AI through the GovAI Coalition, which was established to give local governments a voice in shaping the future of AI, ensuring it is developed responsibly and for the public good. Promoting the City’s commitment to equity and inclusion, we believe that all members of the community, regardless of background, have access to the tools and resources needed to thrive in the digital age. San José is in the heart of Silicon Valley, which boasts a rich history in technology, education, and agriculture. Over half of San José residents speak a language other than English at home, highlighting the importance of language accessibility in all City services. By fostering inclusivity, promoting digital literacy, and building accessible platforms, we are advancing technology while creating a more equitable future for everyone. At the City of San José, we promote work-life alignment and a focus on growth to bring out the best in our people. Come join us in making San José the most vibrant, equitable, sustainable, and innovative city in the nation! Visit the Information Technology Department’s website to learn about our culture, vision, leadership, and innovative initiatives." We need to remove the "Visit the Information Technology Department’s website..." as it's like a link instruction. Also maybe remove "Come join us in making San José the most vibrant, equitable, sustainable, and innovative city in the nation!" That's promotional but maybe okay? It's not boilerplate; it's part of department description. Keep it. Thus About the Department paragraph: combine the sentences after removing the visit lines. Let's craft: "The City of San José innovates to provide exceptional civic services using advanced technologies to help our community thrive. As one of the largest cities in the nation, the City manages a large set of services and assets and operates on a budget of $6.2 billion, with approximately 7,000 employees, serving about 1 million residents and 80,000 businesses in the heart of Silicon Valley. The Information Technology Department’s (ITD) mission is to enrich the quality of life in San José through innovation, collaboration, and engagement. ITD enables that mission through business and infrastructure systems, cybersecurity, data management and analysis, responsible use of Artificial Intelligence (AI), productivity and collaboration tools, the San José 311 resident experience platform, data equity and privacy programs, and strategic planning. San José is powered by truly great people, a robust technology environment, and a strong sense of purpose. The IT department is a leader in innovation, embracing cutting-edge technologies and pioneering solutions to enhance efficiency and quality of life in San José. As part of this effort, the City leads a national initiative for AI through the GovAI Coalition, which was established to give local governments a voice in shaping the future of AI, ensuring it is developed responsibly and for the public good. Promoting the City’s commitment to equity and inclusion, we believe that all members of the community, regardless of background, have access to the tools and resources needed to thrive in the digital age. San José is in the heart of Silicon Valley, which boasts a rich history in technology, education, and agriculture. Over half of San José residents speak a language other than English at home, highlighting the importance of language accessibility in all City services. By fostering inclusivity, promoting digital literacy, and building accessible platforms, we are advancing technology while creating a more equitable future for everyone. At the City of San José, we promote work-life alignment and a focus on growth to bring out the best in our people. Come join us in making San José the most vibrant, equitable, sustainable, and innovative city in the nation!" Now Position Duties prose before list: The paragraph starting "This is a highly technical, hands-on leadership role responsible for managing a small team that protects the organization from cyber threats through cyber-threat intelligence, cybersecurity emergency response, security engineering, threat detection, and defensive security architecture." Continue until "Key duties include but are not limited to:" We'll keep that as prose. Then list items. We need to ensure we keep all bullet points exactly as given. Let's extract bullet points: - Provide hands-on technical leadership, mentoring, prioritization, and quality assurance while coordinating with infrastructure, network, endpoint, cloud, application, identity, and service desk teams to reduce enterprise cybersecurity risk. - Lead the collection, analysis, and operational use of cyber-threat intelligence to identify emerging threats, vulnerabilities, attacker techniques, and indicators of compromise. - Translate intelligence into actionable defenses, including detections, hunting queries, blocking rules, advisories, and risk-based recommendations that support incident response, vulnerability management, security engineering, and leadership reporting. - Lead cybersecurity emergency response for suspected or confirmed security incidents, including triage, containment, eradication, recovery, root-cause analysis, and post-incident improvement. - Provide technical direction during high-pressure events involving phishing, malware, credential compromise, unauthorized access, data exposure, endpoint compromise, cloud compromise, network intrusion, or advanced threats. - Build and maintain security operations standards, process flows, incident response playbooks, escalation procedures, evidence-handling practices, and clear incident documentation. - Lead cybersecurity projects and operational initiatives by defining scope, milestones, deliverables, dependencies, risks, and success criteria; coordinating cross-functional technical teams, vendors, and stakeholders; tracking progress; resolving blockers; communicating status; and ensuring timely delivery of measurable security and operational outcomes. - Lead the design, implementation, tuning, and continuous improvement of enterprise security controls across network, endpoint, cloud, identity, email, data protection, remote access, logging, monitoring, and automation environments. - Ensure security tools are properly configured, integrated, monitored, and producing actionable outcomes. - Partner with technical teams to review proposed changes, identify risks, recommend compensating controls, and embed security into enterprise solutions. - Oversee the development, validation, tuning, and continuous improvement of detection logic across SIEM, EDR/XDR, network, identity, cloud, and email security platforms. - Lead threat-hunting activities to identify suspicious behavior, control gaps, misconfigurations, compromised accounts, lateral movement, persistence, and other indicators of attacker activity. - Improve detection coverage, reduce false positives, and measure operational effectiveness. - Independently lead comprehensive cybersecurity risk reviews of complex technology implementations, including out-of-the-box vendor solutions, cloud platforms, SaaS applications, infrastructure services, endpoint tools, network technologies