Information Security Analyst II

San Bernardino County; California (MO); On-site; USD 90,000 - 130,000; Full time

Job summary

San Bernardino County seeks an Information Security Analyst II to monitor, analyze, and respond to cybersecurity incidents across county systems and data assets. The role collaborates with IT teams, departments, and external partners to identify threats, assess risks, and implement remediation.

The ideal candidate will lead response efforts, perform vulnerability assessments, and drive improvements in security governance, compliance, and staff training. On-call rotations may be required.

Qualifications

• Three years of experience assisting with the implementation, management, and monitoring of IT security solutions and programs.
• Sixty (60) semester units of coursework in information security or related field.
• Master’s degree in information systems / information security / IT / CS or closely related field (preferred).
• Relevant certifications such as CEH, CSA, or CISSP are desirable.

Responsibilities

• Monitor, analyze, investigate, and respond to cybersecurity events and incidents affecting county systems, applications, networks, and information assets.
• Lead response efforts in collaboration with IT teams, vendors, and cyber intelligence partners.
• Coordinate cybersecurity incidents with Human Resources, county departments, and outside agencies.
• Educate team members and leadership on security measures, policies, and best practices.
• Lead or coordinate vulnerability assessments with focus on threat intelligence and remediation.
• Collaborate on network security design enhancements.
• Lead countywide Security Awareness Training and Phishing Simulation programs.
• Review contracts, procurement documents, and licensing for cybersecurity, privacy, and compliance risks.

Job description

The Innovation and Technology Department is seeking motivated and passionate professionals for the role of Information Security Analyst II (ISA II). The analyst will be responsible for monitoring, analyzing, and collaborating on security incidents and events to safeguard the security operations of the Countywide Information Security Program, that provides protection, governance, risk, and compliance.

The ISA II monitors, analyzes, investigates, and responds to cybersecurity events and incidents that may affect County systems, applications, networks, and information assets. The analyst will work collaboratively with experienced cybersecurity team members, County departments with diverse business and regulatory requirements, and various technology teams to identify potential threats, evaluate security concerns and issues, and support efficient and effective response including identifying appropriate mitigation and remediation activities. They will respond to, defend against, consult on, and resolve enterprise and departmental security concerns, events, issues, and incidents related to cyber, operational, and information security.

• Monitoring computer networks for security issues and suspicious activities.
• Performs as an incident responder and investigates cybersecurity incidents.
• Lead response efforts in collaboration with other IT teams, vendors, and cyber intelligence partners to analyze and remediate the issue.
• May lead or coordinate cybersecurity incidents and investigations with Human Resources, County departments, outside agencies (e.g. regulatory agencies) including law enforcement.
• Educates team members; and recommends security measures including protocols, policies, and standard practice to leadership.
• May lead, facilitate, coordinate, or conduct vulnerability assessments with a proactive focus on threat intelligence and the mitigation and prevention of cyber attacks.
• Collaborate with colleagues for network security design enhancements.
• Leads the coordinating and facilitating the Countywide Security Awareness Training Program
• Leads the coordinating and facilitating the Countywide Phishing Simulation Program.
• Leads the conducting, coordinating, and facilitating cybersecurity or information security tabletop exercises.
• Reviews and coordinating contracts, procurement documents, and software or service licensing agreements to identify and assess cybersecurity, privacy, and compliance risks, and provides recommendations to ensure adherence to organizational security policies and regulatory requirements.
• Participate in on-call rotation and after-hours maintenance as needed.

For more detailed information, refer to the Information Security Analyst II job description.

EXCELLENT BENEFITS

To review job-specific benefits, refer to: Summary of Benefits and Memoranda of Understanding (MOU)

CONDITIONS OF EMPLOYMENT

Pre-Employment Process: Applicants must successfully pass a background check and a job-related physical exam, including a drug test, prior to employment.

Availability: Incumbents may occasionally work evening and weekend hours. Some overtime, on-call, or call back work may be required.

Sponsorship: Please note San Bernardino County is not able to consider candidates who will require visa sponsorship at the time of application or in the future. Candidates must be able to present their legal right to work in the United States.

Candidates must meet the Experience AND Education requirement in order to qualify.

REQUIRED EXPERIENCE

• Three(3) years of experience assisting with the implementation, management, and monitoring of IT security solutions and programs.

REQUIRED EDUCATION

• Sixty (60) semester (90 quarter) units of completed courses from an accredited college or university in information security, information systems, programming, computer science, software engineering, or a closely related field.

SUBSTITUTIONS

• One (1) additional year of qualifying work experience may substitute for the education requirement.
• A Bachelor's degree in information security, information systems, information technology, programming, computer science, software engineering, or a closely related field may substitute one (1) year of the required experience.

Qualifying degrees and coursework must be conferred by institutions accredited by an accrediting body recognized by the U.S. Department of Education. Degrees earned outside the United States must be accompanied by an evaluation from a recognized credential evaluation service verifying U.S. equivalency.

The ideal candidate will possess:

• Master’s degree in information systems, information security, information technology, computer science, or a closely related field.
• Information security experience in higher education or state/local government.
• Information security related training or certifications such as CEH, CSA, or CISSP.
• Experience performing information security audits or risk assessments.
• Ability to administer network and host-based tools for penetration testing and ethical hacking products and tools.
• Knowledge of host compromise, and various techniques for malware injection and MITRE Kill Chain Framework.
• Proficiency in performing risk, business impact, control, and vulnerability assessments, and in defining treatment strategies.
• Strong analytical skills to analyze security requirements and relate them to appropriate security controls.
• Experience with cloud infrastructure and provisioning technology.

Examination Procedure

There will be a competitive evaluation of qualifications based on the information provided in the Application and the Supplemental Questionnaire. You are encouraged to include detailed descriptions of your qualifying experience and skills, as only the most highly qualified applicants will be referred to the Department.

Application Procedure

Please complete and submit the online employment application and supplemental questionnaire for consideration before 5:00 PM ST, FRIDAY, OCTOBER 2, 2026. Resumes will not be accepted in lieu of the application and/or supplemental questionnaires.

To ensure timely and successful submission of your online application, please allow ample time to complete and submit your application before the filing deadline. Applicants will be automatically logged-out if they have not submitted the application and all required materials prior to the posted deadline. Once your application has been successfully submitted you will receive an onscreen confirmation and an email. We recommend that you save and/or print these for your records. Please note: if you do not receive an onscreen confirmation and an email acknowledging our receipt of your application, we have not received your application.

If you need technical assistance, follow this link to review the Government Jobs online application guide or contact their Toll-Free Applicant Support line at [phone]. Please note that Human Resources is not responsible for any issues or delays caused by your internet connection, computer, or browser when submitting an application.

Equal Employment Opportunity (EEO) / Americans with Disabilities Act (ADA)

San Bernardino County is an Equal Employment Opportunity (EEO) and Americans with Disabilities Act (ADA) compliant employer, dedicated to ensuring equal employment opportunities for all employees and applicants.

ADA Accommodation

If you have a disability and need accommodations during the testing process, please submit the Special Testing Accommodations Request Form (Download PDF) within one week of the recruitment filing deadline.

Veterans' Preference

Eligible veterans, their spouses, or widows/widowers who are not current County employees may receive additional Veterans' Preference points. For details and instructions on how to request these points, please refer to the Veterans' Preference Policy.

For more important details, review the Applicant Information and County Employment Process.