INFORMATION TECHNOLOGY SPECIALIST I

California Department of Social Services; Sacramento (CA); Hybrid; USD 73,000 - 97,000; Full time

Job summary

California Department of Social Services in Sacramento seeks an Information Security Specialist to monitor and protect critical IT assets. This 12-month limited-term role focuses on log analysis, data protection, incident response, vulnerability management, and security monitoring.

You will configure approved scanning tools, coordinate remediation with stakeholders, and report on security posture while supporting a hybrid telework arrangement.

Qualifications

• Identify, reviews and analyzes security logs and incidents to detect potential threats.
• Configure and use approved scanning tools for vulnerability assessments.
• Coordinate with teams to remediate security findings and improve controls.

Responsibilities

• Identify, reviews, and analyzes network security appliance logs, DLP alerts, and other data movement indicators.
• Monitor, triage, document, and escalate data protection incidents involving sensitive information.
• Develop scripts, queries, dashboards, and configurations to support security operations.
• Collaborate with senior staff to determine root causes and remediation options.
• Perform vulnerability assessments on networks, systems, and applications.

Skills

Analytical thinking

Incident response

Risk assessment

Log analysis

Communication

Education

Information Technology Specialist I classification

Tools

DLP tools

Vulnerability scanning tools

Security monitoring tools

Endpoint protection

Job description

Position Details

Working Title: Information Security Specialist

Job Code #: JC-531998

Position #(s): 800-721-1402-955

Classification: INFORMATION TECHNOLOGY SPECIALIST I

$6,513.00 - $8,729.00 A

$7,163.00 - $9,599.00 B

$7,864.00 - $10,537.00 C

New to State candidates will be hired into the minimum salary of the classification or minimum of alternate range when applicable.

# of Positions: 1

Work Location: Sacramento County

Telework: Hybrid

Job Type: 12 Month Limited Term - Full Time

Department Information

Are you interested in making a difference in the lives of fellow Californians while achieving your career goals? Do you set high standards for yourself and enjoy a collaborative and challenging work environment? The mission of the California Department of Social Services is to serve, protect, and support the people of California experiencing need in ways that empower wellbeing and disrupt systemic inequities. The vision of the California Department of Social Services is to provide quality services with a commitment to an inclusive, diverse, and equitable California where all people can thrive.

Information System Division's (ISD) mission is to develop, support and promote the business value of IT which comes from the ability to conduct business processes more reliably, faster and at lower cost. ISD creates value by continually improving customer service and providing access to information that enables better decision making by CDSS business units.

• effectively managing information systems and equipment;
• planning, communicating and implementing responsible information technology policies and solutions; and,
• sharing and transferring information technology knowledge and tools.

CDSS Guiding Principles

Diversity. Equity. Inclusion. Accessibility. Belonging. We ensure opportunities for everyone to participate in a meaningful way in fulfilling the mission and vision of CDSS.

Community Engagement We prioritize the lived experiences of community members as a driving force behind the creation, implementation, desired impact, or change of programs and services.

Empowerment We engage, operate, and advocate from the understanding that each community and person have desires and capabilities to lead in their own life.

Quality Services We provide services that align intent and impact by ensuring that they are accessible, community driven, interconnected, and continuously improved.

Data Defined Outcomes We equitably collect and analyze data, take data-driven action, and measure outcomes relevant to those we serve, ensuring transparency and accountability.

Job Description And Duties

This is a 12-month limited-term position and may be extended to a maximum of 24-months and/or may become permanent based on operational needs. Identifies, reviews, and analyzes network security appliance logs, Tier 1 Data Loss Prevention (DLP) alerts, audit logs, endpoint activity, email security events, cloud activity, and other data movement indicators to detect potential security incidents, unauthorized disclosure, improper transmission, misuse of data, or data exfiltration attempts. Monitors, investigates, triages, documents, and escalates DLP and data protection incidents involving sensitive, confidential, personal, or regulated information; identifies appropriate technical and business stakeholders to support incident response and resolution. Analyzes phishing, malware, endpoint protection, antimalware, DLP, vulnerability, configuration, and other security artifacts to assess risk, validate findings, identify trends, and recommend mitigation or remediation actions. Conducts vulnerability and data protection risk assessments by configuring approved scanning tools, coordinating scan schedules based on asset criticality, analyzing vulnerability scan results, reviewing security misconfigurations, and validating findings using network, endpoint, application, and security monitoring tools. Monitors public, vendor, governmental, and authorized threat intelligence sources for emerging vulnerabilities, threats, and indicators of compromise that may affect departmental systems. Reviews logs, DLP events, vulnerability data, configuration information, and related security telemetry to identify evidence of potential intrusion activity, attempted data exfiltration, systemic security issues, or control weaknesses. Performs technical impact and risk assessments and prepares findings, metrics, reports, and recommendations related to security. Collaborates with senior ISPO staff and technical subject matter experts to ensure accurate root‑cause analysis is conducted and appropriate remediation options are identified. Conducts vulnerability assessments of networks, applications, operating systems, and related technical environments using approved security assessment tools, procedures, and methodologies. Develops, tests, and maintains scripts, queries, dashboards, tool configurations, workflows, and documentation used to support vulnerability scanning, validation, analysis, and reporting. Analyzes vulnerability scan results and related security data to validate accuracy, identify false positives, assess risk and business impact, prioritize findings, and recommend remediation options. Evaluates, prepares, and disseminates threat advisories and vulnerability notifications to system owners and other stakeholders in a timely manner. Develops metrics, reports, and technical summaries on system security posture, threat activity, vulnerability exposure, remediation progress, and patch management status. Uses authorized security testing and assessment tools and techniques to evaluate the effectiveness of implemented controls, validate identified weaknesses, and provide insight into the organization’s threat and vulnerability environment.

The Department of Social Services does not participate in E-Verify for employment authorization purposes. Applicants must be authorized to work in the United States without the need for visa sponsorship by the start date of employment.

If you would like to share how you learned about this career opportunity, please take a moment to complete our brief Recruitment Survey.

You will find additional information about the job in the Duty Statement.

Special Requirements

• The position(s) require(s) a Background Investigation be cleared prior to being hired.

Please Note: A Statement of Qualifications or Supplemental Questionnaire must be submitted along with your application to be considered for this position. Applications submitted without an SOQ may be disqualified for this position.

Do not include any confidential information in any documents (i.e., application, resume, or transcripts) you submit for this job vacancy. Confidential information that should be excluded or removed from these documents include but is not limited to: Social Security Number (SSN), birthday and/or age, photos, student/other ID number, driver’s license number (unless required), basis of eligibility, exam results, LEAP status, and marital status. Confidential information submitted via a CalCareer Account (electronic application) is automatically redacted upon submission.

Statement of Qualifications must be no more than two pages in length, size 12-point Arial font.

• Describe how you stay current with emerging technology and industry trends.
• Describe your experience in preparing written reports, documentation or presentations.
• How does your previous work experience align with the duties and responsibilities of this position?

You are required to complete employment history on the application form (STD 678). You may be disqualified from the hiring and selection process if the employment history is inaccurate or incomplete. Resumes will not take the place of employment history.

If you are meeting minimum qualifications with education, you must include your unofficial transcripts for verification. If selected, you may be required to provide official transcripts at the time of hire.

Candidates who reside outside of the State of California may be admitted to the job interview, but they must provide proof of residence in California prior to being eligible for appointment.

Equal Opportunity Employer The State of California is an equal opportunity employer to all, regardless of age, ancestry, color, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding and related medical conditions), and sexual orientation.

It is an objective of the State of California to achieve a drug‑free work place. Any applicant for state employment will be expected to behave in accordance with this objective because the use of illegal drugs is inconsistent with the law of the State, the rules governing Civil Service, and the special trust placed in public servants.

Follow us on LinkedIn to stay updated on our latest opportunities.