Information Security Analyst I

SAN-Bernardino-Count; California (MO); On-site; USD 65,000 - 90,000; Full time

Job summary

San Bernardino County is seeking an Information Security Analyst I to begin a career in cybersecurity within the Innovation and Technology Department. You will assist with monitoring, analyzing, investigating, and responding to security events that affect County systems, networks, and data assets.

The role involves collaboration across departments, vendors, and IT teams to identify threats and implement mitigations.

Qualifications

• Bachelor's degree or higher in a relevant field as described
• 60+ semester units or 90+ quarter units in information security, information systems, CS or related field
• Certifications such as CEH, CSA, CISSP are preferred

Responsibilities

• Assist in monitoring computer networks for security issues and suspicious activities
• Assist in incident response and investigate cybersecurity incidents
• Assist in response efforts with IT teams, vendors, and partners to analyze and mitigate issues
• Educates team members on security measures and best practices
• Assist in conducting vulnerability assessments with focus on threat intelligence and mitigation
• Collaborate on network security design enhancements
• Coordinate and facilitate Security Awareness Training Program
• Coordinate and facilitate Phishing Simulation Program
• Assist in cybersecurity tabletop exercises
• Assist in reviewing contracts and licenses to identify cybersecurity risks
• Participate in on-call rotation and after-hours maintenance

Skills

Analytical skills

Risk assessment

Security controls

Cloud infrastructure

Education

Bachelor's degree in information systems, information security, information technology, AI, computer science, or related field

60 semester or 90 quarter units in information security or related field

Tools

Penetration testing tools

Ethical hacking tools

Job description

The Innovation and Technology Department is seeking motivated professionals who are interested in beginning and developing a career in cybersecurity for the position of Information Security Analyst I(ISA I). As an entry-level member of the Countywide Information Security Program that provides protection, governance, risk, and compliance, the ISA I will assist with monitoring, analyzing, investigating, and responding to cybersecurity events and incidents that may affect County systems, applications, networks, and information assets. The analyst will work collaboratively with experienced cybersecurity team members, County departments with diverse business and regulatory requirements, and various technology teams to identify potential threats, evaluate security concerns and issues, and support efficient and effective response including identifying appropriate mitigation and remediation activities.

The position will also assist in addressing enterprise and departmental cybersecurity and/or information security needs, including security monitoring, incident response, vulnerability and threat intelligence analysis, security assessments, and operational security support. Through hands-on experience, training, and mentorship, the ISA I will develop the analytical, technical, and critical thinking skills necessary to help protect County information systems and assets to continuously strengthen the County's overall cybersecurity and information security posture.

Key responsibilities may include:

• Assist in monitoring computer networks for security issues and suspicious activities.
• Assist in incident response and investigate cybersecurity incidents.
• Assist in response efforts in collaboration with other IT teams, vendors, and cyber security intelligence partners to analyze and mitigate and/or remediate the issue.
• Educates team members; and recommends security measures including protocols, policies, and standard practices to leadership.
• Assist in conducting vulnerability assessments with a proactive focus on threat intelligence and the mitigation and prevention of cyberattacks.
• Collaborate with colleagues for network security design enhancements.
• Assist in coordinating and facilitating the Countywide Security Awareness Training Program.
• Assist in coordinating and facilitating the Countywide Phishing Simulation Program.
• Assist in conducting, coordinating, and facilitating cybersecurity or information security tabletop exercises.
• Assist in reviews and coordinating of contracts, procurement documents, and software or service licensing agreements to identify and assess cybersecurity, privacy, and compliance risks, and provide recommendations to ensure adherence to organizational security policies and regulatory requirements
• Participate in on-call rotation and after-hours maintenance as needed.

For detailed information, refer to Information Security Analyst I.

EXCELLENT BENEFITS

To review job-specific benefits, refer to Summary of Benefits and the Memoranda of Understanding (MOU).

CONDITIONS OF EMPLOYMENT

Pre-Employment Process:

Applicants must successfully pass a background check and a job-related physical exam, including a drug test, prior to employment.

Availability:

Incumbents may occasionally work evening and weekend hours. Some overtime, on-call, or call back work may be required.

Sponsorship:

San Bernardino County is not able to consider candidates who will required work visa sponsorship at the time of application or in the future.

Candidates must meet the Experience AND Education requirement in order to qualify.

REQUIRED EXPERIENCE:

One (1) year of experience performing technical, analytical, or operational duties related to information technology, cybersecurity, information security, networking, systems administration, technical support, or a closely related field.

Qualifying experience should include exposure to one or more of the following: security monitoring, incident response, vulnerability management, identity and access management, network or endpoint security, system administration, security assessments, or investigation of technology-related issues.

REQUIRED EDUCATION:

Sixty (60) semester or ninety (90) quarter units of completed coursework from an accredited college or university in information security, information systems, programming, computer science, software engineering, or a closely related field.

SUBSTITUTIONS:

• One (1) additional year of qualifying work experience may substitute for the education requirement.
• A completed Bachelor's degree from an accredited college or university in information security, information systems, information technology, artificial intelligence, programming, computer science, software engineering, or a closely related field may substitute one (1) year of the required experience.

**Qualifying degrees and coursework must be conferred by institutions accredited by an accrediting body recognized by the U.S. Department of Education. Degrees earned outside the United States must be accompanied by an evaluation from a recognized credential evaluation service verifying U.S. equivalency.

The ideal candidate will possess:

• Bachelor's degree in information systems, information security, information technology, artificial intelligence, computer science, or a closely related field.
• Information security experience in higher education, state, or local government.
• Informationsecurity related training or certifications such as CEH, CSA, or CISSP.
• Experience performing information security audits, security assessments, or risk assessments.
• Ability to administer network and host-based tools for penetration testing and ethical hacking products andtools.
• Knowledge of host compromise, various techniques for malware injection, and MITRE Kill Chain Framework.
• Proficiency in performing risk, business impact analysis, vulnerability assessments, while formulating corrective action plans and/or treatment strategies and/or mitigation strategies.
• Strong analytical skills to analyze security requirements and relate them to appropriate security controls.
• Experience with cloud infrastructure and provisioning technology.

Examination Procedure:

There will be a competitive evaluation of qualifications based on the information provided in the Application and the Supplemental Questionnaire. You are encouraged to include detailed descriptions of your qualifying experience and skills, as only the most highly qualified applicants will be referred to the Department.

Equal Employment Opportunity (EEO) / Americans with Disabilities Act (ADA):

San Bernardino County is an Equal Employment Opportunity (EEO) and Americans with Disabilities Act (ADA) compliant employer, dedicated to ensuring equal employment opportunities for all employees and applicants.

ADA Accommodation:

If you have a disability and need accommodations during the testing process, please submit the Special Testing Accommodations Request Form (Download PDF) within one week of the recruitment filing deadline.

Veterans' Preference:

Eligible veterans, their spouses, or widows/widowers who are not current County employees may receive additional Veterans' Preference points. For details and instructions on how to request these points, please refer to Veterans' Preference Policy.

For more important details,

review the Applicant Information and County Employment Process.