Job details

Senior Cyber Security Specialist

***TO BE CONSIDERED FOR THIS POSITION, PLEASE FOLLOW THE APPLICATION INSTRUCTIONS ON THE OFFICIAL BULLETIN FOUND ON WWW.JOBS.CA.GOV: https://www.calcareers.ca.gov/CalHrPublic/Jobs/JobPosting.aspx?JobControlId=383690

Are you an experienced Security Analyst? Are you ready to take the next step in your career? If so, consider an opportunity at State Fund.

State Funds’ Enterprise Security Technical unit has an exciting opportunity for a Senior Cyber Security Specialist. The ideal candidate will have experience advising security leadership on matters related to complex security incident response projects, forensics analysis, and emerging security risks. The incumbent will work under the leadership of the Enterprise Security Management and Chief Information Security Officer (CISO).

In this role the Senior Cyber Security Specialist will:

Perform analysis on the most complex security projects/assignments including security incident response (SIR) work
Provide in-depth security knowledge and consultation when analyzing security risks (e.g., analyzing security related reports; evaluating security risks impacting State Fund; and making recommendations to all State Fund programs including Enterprise Procurement)
Monitor and provide recommendations on Information Security Plan identified Gap Analysis
Conduct most complex forensic analysis and provide recommendations to improve forensics capabilities and tools
Research and analyze threat intelligence, recommend resolution/mitigation of threats, and improvements
Train/mentor new/existing team members on the following, but not limited to complex SIR tickets and forensic cases, and threat intelligence
Conduct the most complex incoming non-vendor Risk Assessments (RAs) as needed

Minimum Qualifications:

Link: https://www.calhr.ca.gov/state-hr-professionals/Pages/1400.aspx

Five (5) years of IT experience, one year of which shall include experience in a lead or expert capacity performing a variety of progressively responsible technical or analytical tasks for computer systems or services in one or more of the major six domains or a closely related or emerging information technology field
A bachelor's or higher degree from an accredited college or university may substitute for four years of the required general information technology experience. An associate's degree from an accredited college may substitute for two years of the required general information technology experience. Only one degree may be used for substitution.

When using education to meet minimum qualifications, education must include 15 semester units (or 22.5 quarter units) of information technology or closely related course work.

Desired Qualifications

As a successful candidate, we are looking for candidates with the following skills and/or experience within an Information Security program:

At least four (4) years of experience conducting complex security incident response and forensics analysis
Advanced knowledge and working experience of emerging security risks
Expert knowledge and experience identifying information security risks and mitigations
Working experience on obtaining cyber threat intelligence and making the information usable by the security incident response process
Expert knowledge and experience in developing/writing policy guidelines, procedures, standards, and controls
Advanced knowledge and understanding of security frameworks (e.g., NIST, ISO, PCI, etc.)
CISA and/or CISSP certifications will be a plus

Working at State Fund offers EXCELLENT benefits including: