Information Security Analyst I

San Bernardino County; San Bernardino (CA); On-site; USD 65,000 - 90,000; Full time

Job summary

San Bernardino County seeks an Information Security Analyst I to begin a career in cybersecurity within the Innovation and Technology Department. The role supports monitoring, analyzing, investigating, and responding to cyber events affecting County systems, applications, and networks.

Mentorship will develop technical and analytical skills for strengthening the County's security posture. You will work with experienced team members and various technology groups to identify threats, evaluate

Qualifications

• Bachelor's degree in information security or closely related field.
• One year of experience in IT, cybersecurity, information security, networking, or related area.
• Experience with security assessments, risk assessments, or vulnerability management.

Responsibilities

• Assist in monitoring computer networks for security issues and suspicious activities.
• Assist in incident response and investigate cybersecurity incidents.
• Collaborate with IT teams and partners to analyze and mitigate issues.
• Contribute to security awareness training and phishing simulations.
• Support vulnerability assessments and threat intelligence analysis.

Skills

Information security knowledge

Risk assessment

Cybersecurity auditing

Cloud infrastructure

Analytical skills

Education

Bachelor's degree in information security / information technology

Job description

Posting number: 26-15027-01

Department: Innovation and Technology Department

Job classification: Information Security Analyst I

Posting type: Open

Categories: IT and Computers

Summary

Recruitment banner for Information Security Analyst I for Innovation and Technology Department with cyber security icons in background with SB county logo.

The Innovation and Technology Department is seeking motivated professionals who are interested in beginning and developing a career in cybersecurity for the position of Information Security Analyst I (ISA I). As an entry-level member of the Countywide Information Security Program that provides protection, governance, risk, and compliance, the ISA I will assist with monitoring, analyzing, investigating, and responding to cybersecurity events and incidents that may affect County systems, applications, networks, and information assets. The analyst will work collaboratively with experienced cybersecurity team members, County departments with diverse business and regulatory requirements, and various technology teams to identify potential threats, evaluate security concerns and issues, and support efficient and effective response including identifying appropriate mitigation and remediation activities.

The position will also assist in addressing enterprise and departmental cybersecurity and or information security needs, including security monitoring, incident response, vulnerability and threat intelligence analysis, security assessments, and operational security support. Through hands‑on experience, training, and mentorship, the ISA I will develop the analytical, technical, and critical thinking skills necessary to help protect County information systems and assets to continuously strengthen the County's overall cybersecurity and information security posture.

Key responsibilities may include

• Assist in monitoring computer networks for security issues and suspicious activities.
• Assist in incident response and investigate cybersecurity incidents.
• Assist in response efforts in collaboration with other IT teams, vendors, and cyber security intelligence partners to analyze and mitigate and/or remediate the issue.
• Educates team members; and recommends security measures including protocols, policies, and standard practices to leadership.
• Assist in conducting vulnerability assessments with a proactive focus on threat intelligence and the mitigation and prevention of cyberattacks.
• Collaborate with colleagues for network security design enhancements.
• Assist in coordinating and facilitating the Countywide Security Awareness Training Program.
• Assist in coordinating and facilitating the Countywide Phishing Simulation Program.
• Assist in conducting, coordinating, and facilitating cybersecurity or information security tabletop exercises.
• Assist in reviews and coordinating of contracts, procurement documents, and software or service licensing agreements to identify and assess cybersecurity, privacy, and compliance risks, and provide recommendations to ensure adherence to organizational security policies and regulatory requirements
• Participate in on‑call rotation and after‑hours maintenance as needed.

For detailed information, refer to Information Security Analyst I.

EXCELLENT BENEFITS

To review job-specific benefits, refer to Summary of Benefits and the Memoranda of Understanding (MOU).

Paid time off, health and wellness, professional development, tax savings plan, work-life balance, and retirement.

CONDITIONS OF EMPLOYMENT

Pre‑Employment Process

Applicants must successfully pass a background check and a job‑related physical exam, including a drug test, prior to employment.

Availability

Incumbents may occasionally work evening and weekend hours. Some overtime, on‑call, or call back work may be required.

Sponsorship

San Bernardino County is not able to consider candidates who will required work visa sponsorship at the time of application or in the future.

Examples of duties

Candidates must meet the Experience AND Education requirement in order to qualify

REQUIRED EXPERIENCE

One (1) year of experience performing technical, analytical, or operational duties related to information technology, cybersecurity, information security, networking, systems administration, technical support, or a closely related field.

Qualifying experience should include exposure to one or more of the following: security monitoring, incident response, vulnerability management, identity and access management, network or endpoint security, system administration, security assessments, or investigation of technology‑related issues.

REQUIRED EDUCATION

Sixty (60) semester or ninety (90) quarter units of completed coursework from an accredited college or university in information security, information systems, programming, computer science, software engineering, or a closely related field.

SUBSTITUTIONS

• One (1) additional year of qualifying work experience may substitute for the education requirement.
• A completed Bachelor\'s degree from an accredited college or university in information security, information systems, information technology, artificial intelligence, programming, computer science, software engineering, or a closely related field may substitute one (1) year of the required experience.

Qualifying degrees and coursework must be conferred by institutions accredited by an accrediting body recognized by the U.S. Department of Education. Degrees earned outside the United States must be accompanied by an evaluation from a recognized credential evaluation service verifying U.S. equivalency.

Qualifications

• Bachelor\'s degree in information systems, information security, information technology, artificial intelligence, computer science, or a closely related field.
• Information security experience in higher education, state, or local government.
• Information security related training or certifications such as CEH, CSA, or CISSP.
• Experience performing information security audits, security assessments, or risk assessments.
• Ability to administer network and host‑based tools for penetration testing and ethical hacking products and tools.
• Knowledge of host compromise, various techniques for malware injection, and MITRE Kill Chain Framework.
• Proficiency in performing risk, business impact analysis, vulnerability assessments, while formulating corrective action plans and/or treatment strategies and/or mitigation strategies.
• Strong analytical skills to analyze security requirements and relate them to appropriate security controls.
• Experience with cloud infrastructure and provisioning technology.

Supplemental information

Examination Procedure

There will be a competitive evaluation of qualifications based on the information provided in the Application and the Supplemental Questionnaire. You are encouraged to include detailed descriptions of your qualifying experience and skills, as only the most highly qualified applicants will be referred to the Department.

Equal Employment Opportunity (EEO) / Americans with Disabilities Act (ADA)

San Bernardino County is an Equal Employment Opportunity (EEO) and Americans with Disabilities Act (ADA) compliant employer, dedicated to ensuring equal employment opportunities for all employees and applicants.

ADA Accommodation

If you have a disability and need accommodations during the testing process, please submit the Special Testing Accommodations Request Form (Download PDF) within one week of the recruitment filing deadline.

Veterans' Preference

Eligible veterans, their spouses, or widows/widowers who are not current County employees may receive additional Veterans' Preference points. For details and instructions on how to request these points, please refer to the Veterans' Preference Policy.

For more important details, review the Applicant Information and County Employment Process.