IT Specialist III - Security Operations Program Manager

City of Irvine; Irvine (CA); On-site; USD 100,000 - 130,000; Full time

Job summary

The City of Irvine seeks a skilled Security Operations Program Manager to lead security incident monitoring, detection, and response efforts. This role requires expertise in cybersecurity principles and tools, supporting internal audits and compliance. Candidates should have a Bachelor's degree in Computer Science and ample experience in security operations, working within a community-focused environment.

Qualifications

• Minimum 6 years in information technology with 2 years in a lead role.
• Experience with SIEM, EDR platforms, and cybersecurity best practices.
• Strong knowledge of network protocols and security automation.

Responsibilities

• Lead security incident monitoring and response efforts.
• Conduct forensic investigations and root cause analysis.
• Develop and maintain security policies and incident response plans.

Skills

Cybersecurity principles

Threat detection

Incident response

Analytical skills

Problem-solving

Education

Bachelor's degree in Computer Science

Tools

SIEM platforms

EDR/XDR solutions

Network security tools (e.g., Wireshark)

Job description

This recruitment is open on a continuous basis until filled and will supplement an existing list that will expire on 12/5/2025. This is a continuous recruitment and interested applicants should submit their application as soon as possible. This recruitment may close at any time without notice.

Understanding thatpeople are the foundation for success, the City of Irvine offers a workplace culture that embraces Humility, Innovation, Empathy, Passion, and Integrity. Apply your passion for public service in the City of Irvine, nationally ranked for safety, educational institutions, business enterprises, and quality of life, by joining ourOne Irvine team!

The City is seeking a skilled Security Operations Program Manager to join our team. You will monitor, detect, investigate, and respond to security incidents using SIEM, EDR, and threat intelligence platforms. You'll work with the SOC team to address security events, perform root cause analysis, and help develop response plans and procedures.

Your Impact

• Lead the monitoring, detection, investigation, and response to security incidents using SIEM, EDR, and threat intelligence platforms.
• Work with the SOC team to investigate and remediate security events.
• Conduct root cause analysis and forensic investigations on security breaches and incidents.
• Develop and refine incident response plans, playbooks, and escalation procedures.
• Develop, implement, and maintain security policies, standards, and procedures to comply with NIST 800-53, CIS, CJIS.
• Support internal and external audits, ensuring compliance with regulatory and industry security frameworks.
• Participate in an On-Call rotation and may involve evening and weekend support as needed.
• Assist with security awareness training and user education programs.
• Assist with penetration testing and remediate the findings.
• Oversee the identification, prioritization, and remediation of security vulnerabilities.
• Work with Infrastructure and application teams to ensure timely patching and mitigation of security risks.
• Conduct security gap analysis and implement new security technologies, automation, and best practices.
• Staying updated on the AI technologies, zero-trust network architectures, and evolving cyber threats.
• Find additional information in the Information Technology Specialist III job description.

Minimum Qualifications

• Bachelor's degree in Computer Science or closely related field.
• Six (6) years of information technology experience, with two of those years performing highly specialized work in a lead or expert capacity on highly complex or specialized information systems or services in one or more functional area in a closely related or emerging information technology field.
• Any combination of education and experience that provides equivalent knowledge, skills, and abilities.

Best Fit

• Thorough understanding of cybersecurity principles, including threat detection, vulnerability management, intrusion detection/prevention, and incident response.
• Expertise in SIEM platforms and EDR/XDR solutions.
• Strong knowledge of firewalls, IDS/IPS, VPNs, and endpoint security solutions.
• Knowledge of network protocols (TCP/IP, DNS, HTTP/S, LDAP/LDAPS, TLS) and network security tools (e.g., Wireshark, Snort).
• Knowledge of email security (DMARC, DKIM, and SPF).
• Familiarity with cyber threat intelligence (TAXII/STIX and YARA) and experience with security automation such as Python, SOAR solutions.
• Analyze and respond to complex security incidents, conduct forensic investigations, and implement remediation plans.
• Strong analytical and problem-solving skills to assess cybersecurity risks and recommend mitigations.
• Ability to effectively communicate security risks to technical and non-technical stakeholders.
• Strong knowledge of vulnerability assessment tools and prioritize vulnerabilities based on risk.
• Oversee security projects from initiation to closure, ensuring alignment with organizational goals, risk management strategies, and compliance requirements.
• Supervisory experience is preferred to effectively manage and support team members.

Your Team

The Mission of the Employees of the City of Irvine is to create and maintain a community where people can live, work, and play in an environment that is safe, vibrant, and aesthetically pleasing. We are one team that exists to serve our community in the continual pursuit of a City that offers an exceptional quality of life. The City of Irvine’s five values of Humility, Innovation, Empathy, Passion, and Integrity reflect the interests and needs of the community, and the level of service they expect and desire. We are One Irvine through embrace of a team-oriented approach by living our values every day.

Administrative Services is committed to sound fiscal stewardship in maximizing the City’s ability to deliver high-quality services to the community. The department consists of six areas: Administration, Fiscal Services, Budget and Strategic Planning, Purchasing, Information Technology, and Geographical Information Systems (GIS).

The Process
The selection process will include an examination and conduct a background investigation prior to appointment which includes aPublic Safety Polygraph exam. This recruitment may establish an eligibility list to fill future positions in similar and/or lower classifications within the organization.

Equal Opportunity Employer
The City of Irvine is an Equal Opportunity Employer and provides reasonable accommodations to qualified individuals with disabilities. We encourage you to inform Human Resources at least two business days prior to the first phase of the selection process if you have a disability that may require an accommodation.