Cyber Security Engineer — Hybrid Telework

California Department of Toxic Substances Control; Sacramento (CA); Hybrid; USD 96,000 - 129,000; Full time

Job summary

California Department of Toxic Substances Control in Sacramento is seeking a Cyber Security Engineer to join our mission-critical IT team. The role focuses on protecting state systems and data, supporting cloud deployments, and implementing security measures across enterprise applications.

The successful candidate will manage security components, conduct risk analyses for IaaS, PaaS, and SaaS, and collaborate with stakeholders to design secure solutions.

Qualifications

• 5+ years in Information Technology
• 3+ years in Information Security or Risk Management
• 2+ years in Information Security Tools
• Information Security project experience
• Information Security certifications
• Ability to identify, track, and mitigate risk
• Strong written and verbal communication skills

Responsibilities

• Maintain security components within DTSC's enterprise, including Microsoft 365
• Advise and participate in creation of information security standards and procedures, while analyzing cloud integrations for security compliance
• Collaborate on cloud usage proposals and provide risk analysis for IaaS, PaaS, SaaS offerings
• Design secure solutions including cloud deployments, host-based security, system hardening, remote access, pen testing, threat hunting, and security monitoring
• Conduct audits and vetting of software applications to ensure security compliance and identify concerns
• Triage tool findings, summarize in high-level reports, and implement remediation measures

Skills

IT experience

InfoSec experience

Risk management

Security tools

Security certifications

Communication skills

Job description

California Department of Toxic Substances Control in Sacramento is seeking a Cyber Security Engineer to join our mission-critical IT team. The role focuses on protecting state systems and data, supporting cloud deployments, and implementing security measures across enterprise applications.

The successful candidate will manage security components, conduct risk analyses for IaaS, PaaS, and SaaS, and collaborate with stakeholders to design secure solutions.