Security Operations Center (SOC) Analyst - Tier 1

California Franchise Tax Board; Sacramento (CA); On-site; USD 55,000 - 98,000; Full time

Job summary

California Franchise Tax Board is seeking a Security Operations Center (SOC) Analyst - Tier 1 for a permanent full-time night-shift role in Sacramento. The position supports 24x7 cybersecurity monitoring after hours and on weekends, contributing to the protection of agency systems, data, and people.

The role requires experience in IT security, vulnerability assessment, event analysis, and administration of security technologies.

Qualifications

• Experience in IT security monitoring and SOC operations.
• Knowledge of IT systems hardening and defense.
• Experience with security technologies (firewalls, antivirus, web security, data loss prevention).
• Experience with programming or scripting.
• Experience with networks and protocols.
• Ability to write procedures.
• Strong written and verbal communication skills.

Responsibilities

• Monitor and analyze security events to protect systems 24x7.
• Escalate incidents per standard operating procedures and coordinate responses.
• Maintain SOC documentation and update playbooks as needed.

Skills

InfoSec knowledge

Cybersecurity experience

Firewall administration

Programming experience

Network concepts

Procedures writing

Communication skills

Job description

Job Description And Duties

The salary ranges listed in this Job Control may not reflect reductions in pay in accordance with the 2025 Personal Leave Program. Please follow the link for more information regarding the 2025 Personal Leave Program. http://hrmanual.calhr.ca.gov/Home/ManualItem/1/2113

Under general supervision of the IT Supervisor II, Security Operations Center Unit, the incumbent will perform a wide variety of tasks requiring occasional innovative problem solving related to cybersecurity monitoring within the Franchise Tax Board’s (FTB) Security Operations Center (SOC), which contributes to the protection of FTB’s systems, data, and people. The regular work schedule will be after typical business hours and include weekends and holidays, in order to provide 24x7 coverage. This position performs functions that fall within the Information Technology domain of Information Security Engineering.

Additional positions may become available (eRPA 2627-00123).

You will find additional information about the job in the Duty Statement.

Position Details

Job Code #: JC-534572

Position #(s): 564-184-1401-XXX

Working Title: Security Operations Center (SOC) Analyst - Tier 1

Classification: INFORMATION TECHNOLOGY ASSOCIATE

Salary: $4,935.00 - $6,614.00 A

Salary: $5,424.00 - $7,270.00 B

Salary: $5,930.00 - $7,947.00 C

Salary: $6,521.00 - $8,740.00 D

New to State candidates will be hired into the minimum salary of the classification or minimum of alternate range when applicable.

# of Positions: Multiple

Work Location: Sacramento County

Telework: In Office

Job Type: Permanent, Full Time

Work Shift: 11pm-7:30am

Work Week: Sun-Thurs/Tues-Sat

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to clearly demonstrate how you meet the Minimum Qualifications and Alternate Range Placement for the position on your State Application (STD Form 678). The application should also clearly demonstrate the candidate’s ability to meet the Desirable Qualifications identified in this job advertisement. The Classification Specification is located on this Job Announcement Posting under "Minimum Requirements".

• Knowledge of Information Technology systems, with respect to hardening and defending them
• Experience in a cybersecurity/Information security role such as: Security vulnerability assessment, Security event analysis, & Security technology (firewall, antivirus, web security, data loss prevention) administration
• Security technology (firewall, antivirus, web security, data loss prevention) administration
• Experience with computer programming
• Experience working with network concepts and protocols
• Experience writing procedures
• Ability to communicate effectively, both verbally and in writing

Contact Information

The Human Resources Contact is available to answer questions regarding the application process. The Hiring Unit Contact is available to answer questions regarding the position.

Department Website: http://www.ftb.ca.gov

Human Resources Contact:

Classification & Hiring Unit

[phone]

Hiring Unit Contact:

David Gomez Jr

[phone]

[e-mail]

Please direct requests for Reasonable Accommodations to the interview scheduler at the time the interview is being scheduled. You may direct any additional questions regarding Reasonable Accommodations or Equal Employment Opportunity for this position(s) to the Department's EEO Office.

EEO Contact:

Reasonable Accommodation Unit

[phone]

[e-mail]

California Relay Service: 1-800-735-2929 (TTY), 1-800-735-2922 (Voice) TTY is a Telecommunications Device for the Deaf, and is reachable only from phones equipped with a TTY Device.

Final Filing Date: 10/18/2026