Cybersecurity Solutions Manager

Job Description and Duties

From ransomware attacks to large-scale data breaches, California faces an increasingly complex cyber threat environment. If you are looking for a leadership role where you can make a meaningful impact on the security and resilience of California’s critical systems, consider joining Cal OES as part of the California Cybersecurity Integration Center (Cal-CSIC).

The Cal-CSIC works to reduce the likelihood and severity of cyber threats and attacks across the state by enhancing coordination, information sharing, and incident response among public and private partners. Within Cal-CSIC, the Mission Support Branch (MSB) provides the internal technology and administrative backbone that enables this mission to succeed. MSB’s core functions include cyber policy and strategy development, knowledge management, vendor and product support, partner onboarding and success, relationship management, IT and system engineering, IT project management, and metrics collection, reporting, and governance.

The Cybersecurity Solutions Manager (IT Manager I) provides leadership and oversight for technical strategies and solutions across multiple domains, with emphasis on Business Technology Management, System Engineering, and Software Engineering.

Key responsibilities include, but are not limited to:

• Plans, organizes, and directs the development, implementation, maintenance, and support of technology solutions and operational processes that advance the State’s cybersecurity mission.
• Manages projects and provides technical and operational oversight for engineering, development, and operations teams supporting Cal-CSIC cybersecurity tools and services.
• Oversees the delivery of technical and product support to Cyber Operations and Cyber Threat Intelligence teams and activities, strengthening California’s cyber risk awareness, reporting, and response capabilities.

If you are ready to lead innovative cybersecurity solutions that strengthen California’s defenses against emerging cyber threats, we encourage you to apply. In this role, you will help shape the technology, tools, and partnerships that support Cal-CSIC’s mission and enhance the state’s cyber resilience.

This position is located at our Mather Campus and is eligible for a hybrid work schedule which includes up to one day of remote work per week. Additional in office days may be required based on the business need.

You will find additional information about the job in the .

Working Conditions

See duty statement for more information.

Special Requirements

DMV Pull Program : Participation in the DMV Pull Program is required. The position(s) require(s) a valid Driver’s License (DL). You must answer the questions addressing your DL on your application. Ensure you provide your DL number, class, expiration date, and any endorsements and/or restrictions.

Conflict of Interest : This position is designated under the Conflict-of-Interest Code and is required to complete Form 700 within 30 days of appointment. Failure to comply with the Conflict-of-Interest Code requirements may void the appointment.

Application Package Requirements

To have your application considered for this job opportunity:

• List the Job Code and Position Number for this position in the “EXAMINATION(S) OR JOB TITLE(S) FOR WHICH YOU ARE APPLYING” section on the State Application, STD. 678. 
• List your most current employment history first in the “EMPLOYMENT HISTORY” section on the STD. 678. 
• Provide the “From” and “To” dates with the month, day and year, the “Hours Per Week” that you worked and the Total Worked (Years/Months). You may include overtime hours.
• You must complete the “DUTIES PERFORMED” on the State Application (do not note “see attached resume” in this section). Failure to comply and your application is considered incomplete.
• SROA and Surplus are encouraged to apply and must submit a copy of their letter.
• Please note consideration shall be given to work experience gained in a part-time or full-time job, regardless of whether the job was a paid or a volunteer position or was within, or outside of, state service.

If using education to qualify please submit a copy of your transcripts. If selected, official transcripts will be required. Foreign education must obtain and submit verification of United States course/degree equivalency. 

NOTE: Incomplete applications received may not be considered. Resumes are welcomed but do not take the place of the completed State Application STD 678. Applications received via fax or email will NOT be accepted. If you would like confirmation of receipt, please send certified mail.

**A candidate pool may be established for subsequent vacancies.**

**All hires may be subject to a criminal background check.**

**We encourage applicants to apply electronically.**

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

• CompTIA Security+, GIAC Security Essentials, or similar certification.
• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
• Knowledge of project management frameworks and best practices.
• Knowledge of cybersecurity and privacy principles.
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of specific operational impacts of cybersecurity lapses.
• Knowledge of information technology supply chain security and supply chain risk management policies, requirements, and procedures.
• Knowledge of Cloud-based knowledge management technologies and concepts related to security, governance, procurement, and administration.
• Knowledge of Import/Export Regulations related to cryptography and other security technologies.
• Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).
• Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).
• Skill in identifying measures or indicators of system performance and the actions needed to improve or correct performance, relative to the goals of the system.
• Skill in executing the system development life cycle (SDLC) management principles, including software security and usability.
• Skill in developing and applying security system access controls.
• Skill in discerning the protection needs (e.g., security controls) of information systems and networks.
• Skill in evaluating the adequacy of security designs.
• Skill in writing code in a currently supported programming language (e.g., Java, C++).
• Skill in conducting audits or reviews of technical systems.
• Skill in network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• Skill in integrating and applying policies that meet system security objectives.
• Skill in creating policies that enable systems to meet performance objectives (e.g., traffic routing, SLA's, CPU specifications).
• Skill in the use of design modeling (e.g., unified modeling language).
• Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Ability to ensure information system security, acquisition personnel, legal counsel, and other appropriate advisors and stakeholders are participating in decision making from system concept definition/review and are involved in, or approve of, each milestone decision through the entire system life cycle for systems.
• Ability to identify critical infrastructure systems with information communication technology that were designed without system security considerations.

Benefits

Cal OES employees are eligible for a number of benefits and working for us is a great opportunity to join a committed team. Benefits include but are not limited to the following:

• Free Parking
• On-site Gym and Locker room
• Electric Carport
• Excellent CalPERS state pension plan
• 401(k) and 457(b) Plans
• Flexible Schedules
• Generous paid time off
• Health, dental & vision insurance for the employee or the employee's family
• Investment in careers development
• Located near many local eateries, financial institutions, and the Light Rail Station

Benefit information can be found on the CalHR website and the CalPERS website.

Statement of Qualifications

All applicants must provide a Statement of Qualifications (SOQ) for the hiring manager’s review. Failure to include an SOQ will disqualify an applicant from consideration. Your SOQ will be a determining factor of your qualifications for this position. If your qualifications are competitive, you will proceed to the hiring interview. 

A resume in lieu of the SOQ responses will disqualify an applicant from consideration. A standard or generic SOQ will also disqualify an applicant from consideration. 

Please review the Duty Statement for the position. 

The SOQ should be no more than one page, formatted in 12-point Arial font with one-inch margins, and include the applicant's name in upper right corner of page. 

Please respond to the following prompt, providing detailed examples and explanations where appropriate.

• Describe a specific situation where you were accountable for the work of technical staff you did not formally supervise. What actions did you take when someone was underperforming, and how did you work around the authority you lacked?

Looking for guidance on navigating the state's job board or need assistance with uploading your documents or SOQ? Check out helpful how-to videos here: Work4CA: How to Get a State Job Series - YouTube to make your job search easier and more effective!

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• Statement of Qualifications - Please refer to the Statement of Qualifications (SOQ) section at the bottom of this job bulletin for the filing instructions and the SOQ Question(s). Applications submitted without the SOQ may not be considered.