Cybersecurity Analyst
Job Description
Join Provo City Corporation’s Cybersecurity Division and help protect City operations through strong analysis, timely investigation, and clear documentation. This onsite role supports cybersecurity risk, incident, and vulnerability response across multiple City departments, with a focus on operational continuity and practical security improvements.
Location: Provo, UT (onsite)
Schedule: Full time, 40 hours/week, 4/10 work schedule
Salary: USD 72,401 - 118,496 per year
Responsibilities
- Analyze phishing reports, alerts, and suspicious activity to support timely detection and response.
- Collect and preserve evidence related to cybersecurity incidents.
- Perform vendor and application security reviews.
- Develop reports, metrics, and dashboards to support decision-making.
- Coordinate with Information Systems and City departments to address security concerns.
- Support cybersecurity awareness and training initiatives.
- Conduct cybersecurity incident investigations, analysis, and documentation.
- Maintain cybersecurity playbooks, procedures, and documentation.
- Identify, track, and report cybersecurity risks and vulnerabilities.
- Participate in security assessments, audits, and control reviews.
- Serve as operational backup during staff absences or high-demand situations.
- Perform related duties as required.
Requirements
- Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field.
- Two (2) years of experience in cybersecurity, information security, or a related IT field.
Technologies
- SIEM, EDR, and identity management
- Security+, CySA+, GSEC
Benefits
- Employer-paid health insurance
- Retirement and pension plans, including 401k and 401k matching
- Paid leaves including vacation, sick, holidays, bereavement, and parental leaves
- Educational assistance
- Competitive pay
- Free use of the Provo Recreation Center and Peaks Ice Arena
- Provo Library card
- 50% off green fees at Timpanogos Golf Course
Schedule and Operational Expectations
This position has continuity and operational expectations. It serves as backup for operational cybersecurity functions during staff absences or incident surge conditions, and may perform incident investigation and coordination activities as needed. The role requires maintaining sufficient familiarity with procedures and escalation guidelines to support uninterrupted cybersecurity operations.
Selection Process
- Applications are reviewed in the order submitted; first screening is held on August 20, 2026.
- Applicants must meet the minimum qualifications to be eligible for consideration.
- If selected for hire, the candidate must pass a drug screen and criminal background check.
- Non-disclosure may result in dismissal.
- Applicants with unsatisfactory drug screen results will be ineligible for appointment or application to any Provo City position for a minimum period of six (6) months.
Preferred Qualifications
- Relevant certifications (e.g., Security+, CySA+, GSEC, or equivalent).
- Experience with incident response, log analysis, or alert triage.
- Experience conducting security reviews, risk assessments, or vulnerability analysis.
- Familiarity with security tools such as SIEM, EDR, and identity management.
- Experience in government, public sector, or regulated environments.
Full Time/Position Type: Regular
Scheduled Hours: 40
Closing Date: 08/19