Information Security Analyst I

San Bernardino County; California (MO); On-site; USD 60,000 - 90,000; Full time

Job summary

San Bernardino County's Innovation and Technology Department is seeking an entry-level Information Security Analyst I to monitor, analyze, and respond to cybersecurity events that affect county systems and data assets. This role provides hands-on experience in governance, risk, and compliance with mentorship from seasoned professionals.

The ISA I will assist with security monitoring, incident response, vulnerability assessments, threat intelligence, and security testing, collaborating with IT

Qualifications

• Bachelor's degree in information security, information systems, computer science or closely related field.
• 1 year of experience in information technology, cybersecurity, or related fields.
• Certifications such as CEH, CSA, or CISSP are desirable.
• Experience with security monitoring, incident response, or vulnerability management.
• Ability to assess risks and recommend security controls.

Responsibilities

• Assist in monitoring computer networks for security issues and suspicious activities.
• Assist in incident response and investigate cybersecurity incidents.
• Collaborate with IT teams and external partners to mitigate and remediate security issues.
• Educate team members and recommend security measures to leadership.
• Conduct vulnerability assessments with a focus on threat intelligence and mitigation.
• Support coordination of security awareness and phishing simulation programs.

Skills

Cybersecurity monitoring

Incident response

Threat intelligence

Vulnerability assessments

Network security

Education

Bachelor's degree in information systems / information security

Tools

Penetration testing tools

Ethical hacking tools

Job description

The Innovation and Technology Department is seeking motivated professionals who are interested in beginning and developing a career in cybersecurity for the position of Information Security Analyst I(ISA I). As an entry-level member of the Countywide Information Security Program that provides protection, governance, risk, and compliance, the ISA I will assist with monitoring, analyzing, investigating, and responding to cybersecurity events and incidents that may affect County systems, applications, networks, and information assets. The analyst will work collaboratively with experienced cybersecurity team members, County departments with diverse business and regulatory requirements, and various technology teams to identify potential threats, evaluate security concerns and issues, and support efficient and effective response including identifying appropriate mitigation and remediation activities.

The position will also assist in addressing enterprise and departmental cybersecurity and or information security needs, including security monitoring, incident response, vulnerability and threat intelligence analysis, security assessments, and operational security support. Through hands‑on experience, training, and mentorship, the ISA I will develop the analytical, technical, and critical thinking skills necessary to help protect County information systems and assets to continuously strengthen the County's overall cybersecurity and information security posture.

Key responsibilities may include

• Assist in monitoring computer networks for security issues and suspicious activities.
• Assist in incident response and investigate cybersecurity incidents.
• Assist in response efforts in collaboration with other IT teams, vendors, and cyber security intelligence partners to analyze and mitigate and/or remediate the issue.
• Educates team members; and recommends security measures including protocols, policies, and standard practices to leadership.
• Assist in conducting vulnerability assessments with a proactive focus on threat intelligence and the mitigation and prevention of cyberattacks.
• Collaborate with colleagues for network security design enhancements.
• Assist in coordinating and facilitating the Countywide Security Awareness Training Program.
• Assist in coordinating and facilitating the Countywide Phishing Simulation Program.
• Assist in conducting, coordinating, and facilitating cybersecurity or information security tabletop exercises.
• Assist in reviews and coordinating of contracts, procurement documents, and software or service licensing agreements to identify and assess cybersecurity, privacy, and compliance risks, and provide recommendations to ensure adherence to organizational security policies and regulatory requirements
• Participate in on‑call rotation and after‑hours maintenance as needed.

For detailed information, refer to Information Security Analyst I.

EXCELLENT BENEFITS

To review job‑specific benefits, refer to: Summary of Benefits and the Memoranda of Understanding (MOU)

CONDITIONS OF EMPLOYMENT

Pre-Employment Process

Applicants must successfully pass a background check and a job‑related physical exam, including a drug test, prior to employment.

Availability

Incumbents may occasionally work evening and weekend hours. Some overtime, on‑call, or call back work may be required.

Sponsorship

San Bernardino County is not able to consider candidates who will required work visa sponsorship at the time of application or in the future.

Candidates must meet the Experience AND Education requirement in order to qualify.

REQUIRED EXPERIENCE

One (1) year of experience performing technical, analytical, or operational duties related to information technology, cybersecurity, information security, networking, systems administration, technical support, or a closely related field.

Qualifying experience should include exposure to one or more of the following: security monitoring, incident response, vulnerability management, identity and access management, network or endpoint security, system administration, security assessments, or investigation of technology‑related issues.

REQUIRED EDUCATION

Sixty (60) semester or ninety (90) quarter units of completed coursework from an accredited** college or university in information security, information systems, programming, computer science, software engineering, or a closely related field.

SUBSTITUTIONS

• One (1) additional year of qualifying work experience may substitute for the education requirement.
• A completed Bachelor's degree from an accredited** college or university in information security, information systems, information technology, artificial intelligence, programming, computer science, software engineering, or a closely related field may substitute one (1) year of the required experience.

**Qualifying degrees and coursework must be conferred by institutions accredited by an accrediting body recognized by the U.S. Department of Education. Degrees earned outside the United States must be accompanied by an evaluation from a recognized credential evaluation service verifying U.S. equivalency.

The ideal candidate will possess

• Bachelor's degree in information systems, information security, information technology, artificial intelligence, computer science, or a closely related field.
• Information security experience in higher education, state, or local government.
• Informationsecurity related training or certifications such as CEH, CSA, or CISSP.
• Experience performing information security audits, security assessments, or risk assessments.
• Ability to administer network and host‑based tools for penetration testing and ethical hacking products andtools.
• Knowledge of host compromise, various techniques for malware injection, and MITRE Kill Chain Framework.
• Proficiency in performing risk, business impact analysis, vulnerability assessments, while formulating corrective action plans and/or treatment strategies and/or mitigation strategies.
• Strong analytical skills to analyze security requirements and relate them to appropriate security controls.
• Experience with cloud infrastructure and provisioning technology.

Examination Procedure

There will be a competitive evaluation of qualifications based on the information provided in the Application and the Supplemental Questionnaire. You are encouraged to include detailed descriptions of your qualifying experience and skills, as only the most highly qualified applicants will be referred to the Department.

Application Procedure

Please complete and submit the online employment application and supplemental questionnaire for consideration before 5:00 PM PT, FRIDAY, OCTOBER 2, 2026. Resumes will not be accepted in lieu of the application and/or supplemental questionnaires.

To ensure timely and successful submission of your online application, please allow ample time to complete and submit your application before the filing deadline. Applicants will be automatically logged-out if they have not submitted the application and all required materials prior to the posted deadline. Once your application has been successfully submitted you will receive an onscreen confirmation and an email. We recommend that you save and/or print these for your records. Please note: if you do not receive an onscreen confirmation and an email acknowledging our receipt of your application, we have not received your application.

If you need technical assistance, follow this link to review the Government Jobs online application guide or contact their Toll‑Free Applicant Support line at [phone]. Please note that Human Resources is not responsible for any issues or delays caused by your internet connection, computer, or browser when submitting an application.

San Bernardino County is an Equal Employment Opportunity (EEO) and Americans with Disabilities Act (ADA) compliant employer, dedicated to ensuring equal employment opportunities for all employees and applicants.

If you have a disability and need accommodations during the testing process, please submit the Special Testing Accommodations Request Form (Download PDF) within one week of the recruitment filing deadline.

Eligible veterans, their spouses, or widows/widowers who are not current County employees may receive additional Veterans' Preference points. For details and instructions on how to request these points, please refer to Veterans' Preference Policy.

For more important details, review the Applicant Information and County Employment Process.