Security Engineer

Job Description and Duties

Under the direction of the Information Technology Manager II, the incumbent acts as a security engineer, performing security analysis on a complex networked environment. The incumbent is responsible for working on security problems that are complex and assists with security system development and recommendations, configuring, managing and maintaining the technical aspects of the information security architecture. The incumbent is responsible for providing technical expertise in the implementation of policies and standards of information security, confidentiality, privacy, integrity, auditability and controllability of information in the information technology environment. The incumbent provides ongoing security analysis of the network and devices connected to the network. The incumbent recommends the appropriate information security architecture and infrastructure to management and customers. Responsibilities also include gathering information and providing in-depth analysis on investigations, vulnerability assessments and the integration and management of security software into the overall statewide Legislative network. The incumbent works independently or assists, as a team member, project manager and security engineer on complex security initiatives, where the consequences of unmitigated security vulnerabilities could have a high to extremely high impact on the business success of the Office of Legislative Counsel and its customers.

You will find additional information about the job in the .

Special Requirements

Do not include any confidential information on any documents you submit for a job vacancy, such as your STD. 678, resume, or school transcripts. Confidential information that should be excluded or removed from these documents includes, but is not limited to, your social security number, birthdate, student identification number, driver license number (unless required), examination results, LEAP status, marital status, and age. (Note confidential information on the first page of the application submitted online through your CalCareers account will be redacted automatically upon submission.)

Employment Application (STD. 678):

Applicants must submit the required documents in order to be considered for this position. Failure to complete the STD 678 in its entirety may result in disqualification.

School Transcripts:

When using education to qualify, unofficial transcripts must be submitted. Applicants with foreign transcripts must provide a transcript evaluation that indicates the number of units to which the foreign course work is equivalent. If selected for appointment, official transcripts will be required.

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

• Three (3) or more years of experience in using tools such as Splunk, Forescout, Tenable, Qualys, Sectigo or other security tools.
• Knowledge of technical architectures and practices utilized to develop comprehensive security architectures.
• Knowledge of forensic tools and procedures. Knowledge of the metrics associated with analyzing the performance of components of the information technology environment.
• Knowledge of various encryption methods and associated implementation.
• Knowledge of the Legislative Data Center IT environment and how it relates to security in order to facilitate customers, managers, and technical staff in the development or revision of risk management policies.
• Professional certification through the Information Security Certification Program of the International Information Systems Security Certification Consortium (ISC)² Institute as CISSP (Certified Information Systems Security Professional), SSCP (Systems Security Certified Practitioner) or through the SANS Institute's Global Information Assurance Certification (GIAC) Program, or other similar certification, is highly desirable.
• Demonstrated strong interpersonal skills.
• Ability to work in an organized and efficient manner while under pressure in order to meet challenging time constraints.
• Ability to adapt to change priorities and manage multiple concurrent assignments and projects.

Benefits

All OLC employees are excluded from collective bargaining, and therefore, receive enhanced benefits, such as CoBen benefit allowance, employer paid life insurance, additional vacation/annual leave, and are not subject to State Disability Insurance payroll withholding. Additional information can be found on CalHR’s website under .

YOUR EXPERTISE

• Knowledge of technologies such as Splunk, Qualys, Tenable, Sectigo, McAfee/Trellix, Sectigo
• Knowledge of Java, C and C++, Python, SQL, MacOS, Linux, Debugging, Troubleshooting, Data Management, Cybersecurity
• Knowledge of the information security marketplace and trends
• Knowledge of methods to investigate and resolve information security issues
• Experience leading Incident Response efforts in a multi-vendor environment
• Ability to recognize the need to seek the counsel of others appropriately prior to arriving at any conclusions or deciding on a unilateral course of action
• Strong analytical and problem-solving skills
• Ability to apply systems life cycle management concepts used to plan, develop, implement, operate, and maintain information systems
• Ability to positively influence others to achieve results that are in the best interests of the organization
• Ability to communicate change impacts and change activities through various methods
• Ability to develop decision making documents, and assess and understand complex business processes and customers' requirements to ensure new technologies, architectures, and security products will meet their needs
• Knowledge of principles, methods and procedures for desi gning, developing, optimizing, and integrating systems in accordance with best practices
• Professional and personable demeanor, with excellent communication skills

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.