Information Security Specialist

Job Description and Duties

This is a 12-month limited-term position and may be extended to a maximum of 24-months and/or may become permanent based on operational needs.

Identifies, reviews, and analyzes network security appliance logs, Tier 1 Data Loss Prevention (DLP) alerts, audit logs, endpoint activity, email security events, cloud activity, and other data movement indicators to detect potential security incidents, unauthorized disclosure, improper transmission, misuse of data, or data exfiltration attempts. Monitors, investigates, triages, documents, and escalates DLP and data protection incidents involving sensitive, confidential, personal, or regulated information; identifies appropriate technical and business stakeholders to support incident response and resolution. Analyzes phishing, malware, endpoint protection, antimalware, DLP, vulnerability, configuration, and other security artifacts to assess risk, validate findings, identify trends, and recommend mitigation or remediation actions. Conducts vulnerability and data protection risk assessments by configuring approved scanning tools, coordinating scan schedules based on asset criticality, analyzing vulnerability scan results, reviewing security misconfigurations, and validating findings using network, endpoint, application, and security monitoring tools. Monitors public, vendor, governmental, and authorized threat intelligence sources for emerging vulnerabilities, threats, and indicators of compromise that may affect departmental systems. Reviews logs, DLP events, vulnerability data, configuration information, and related security telemetry to identify evidence of potential intrusion activity, attempted data exfiltration, systemic security issues, or control weaknesses. Performs technical impact and risk assessments and prepares findings, metrics, reports, and recommendations related to security.

Collaborates with senior ISPO staff and technical subject matter experts to ensure accurate root-cause analysis is conducted and appropriate remediation options are identified. Conducts vulnerability assessments of networks, applications, operating systems, and related technical environments using approved security assessment tools, procedures, and methodologies. Develops, tests, and maintains scripts, queries, dashboards, tool configurations, workflows, and documentation used to support vulnerability scanning, validation, analysis, and reporting. Analyzes vulnerability scan results and related security data to validate accuracy, identify false positives, assess risk and business impact, prioritize findings, and recommend remediation options. Evaluates, prepares, and disseminates threat advisories and vulnerability notifications to system owners and other stakeholders in a timely manner. Develops metrics, reports, and technical summaries on system security posture, threat activity, vulnerability exposure, remediation progress, and patch management status. Uses authorized security testing and assessment tools and techniques to evaluate the effectiveness of implemented controls, validate identified weaknesses, and provide insight into the organization’s threat and vulnerability environment.

The Department of Social Services does not participate in E-Verify for employment authorization purposes. Applicants must be authorized to work in the United States without the need for visa sponsorship by the start date of employment.

If you would like to share how you learned about this career opportunity, please take a moment to complete our brief 

Need help with applying for positions, taking an examination, or preparing for interviews? Our team is here to support you, reach out anytime at  View email address on calcareers.ca.gov For guidance on applying for a state job, visit 

Follow us on  to stay updated on our latest opportunities.

You will find additional information about the job in the .

Working Conditions

This work location is very convenient! The CDSS is located two blocks from the light rail and public transportation: within walking distance of the State Capitol, parks, restaurants, farmers’ markets and the Golden 1 Arena. Our building has easy access to I-5, Highway 50, and Highway 80.

This position may be eligible for Hybrid work. In-person attendance is required based on the operational needs of the position and in accordance with the Statewide Hybrid Telework Policy, Government Code section 14200, and any applicable department telework requirements. The successful candidate must reside in California at the time of appointment. Proof of California residency may be required.
Please note: Regular commute is not compensable.

Special Requirements

• The position(s) require(s) a Background Investigation be cleared prior to being hired.

Please Note: A Statement of Qualifications or Supplemental Questionnaire must be submitted along with your application to be considered for this position. Applications submitted without an SOQ may be disqualified for this position.

Do not include any confidential information in any documents (i.e., application, resume, or transcripts) you submit for this job vacancy. Confidential information that should be excluded or removed from these documents include but is not limited to: Social Security Number (SSN), birthday and/or age, photos, student/other ID number, driver’s license number (unless required), basis of eligibility, exam results, LEAP status, and marital status. Confidential information submitted via a CalCareer Account (electronic application) is automatically redacted upon submission.

Statement of Qualifications must be no more than two pages in length, size 12-point Arial font.

1. Describe how you stay current with emerging technology and industry trends.

2. Describe your experience in preparing written reports, documentation or presentations.

3. How does your previous work experience align with the duties and responsibilities of this position?

You are required to complete employment history on the application form (STD 678). You may be disqualified from the hiring and selection process if the employment history is inaccurate or incomplete. Resumes will not take the place of employment history.

If you are meeting minimum qualifications with education, you must include your unofficial transcripts for verification. If selected, you may be required to provide official transcripts at the time of hire.

Candidates who reside outside of the State of California may be admitted to the job interview, but they must provide proof of residence in California prior to being eligible for appointment.

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

• Analytical Skills: Approaches problems using a logical, systematic and sequential approach. Weighs priorities and  recognizes underlying issues.
• Learning on the Fly: Learns quickly, is open to change, experiments and is flexible.
• Planning and Results Oriented: Organizes and executes work to meet organizational goals and objectives while  meeting quality standards, following organizational processes and demonstrating continuous commitment.
• Problem-solving and Decision-making: Identifies problems and uses logical analysis to find information, understand  causes and evaluate and select or recommend best possible courses of action.
• Thoroughness: Ensures that work and information is complete and accurate. Ensures that assignment goals,  objectives and completion dates are met. Documents and reports on work progress.
• Teamwork/Partnership: Develops, maintains and strengthens partnerships with others inside or outside of the  organization through effective communication and collaboration.

Benefits

There are many benefits to joining our team! The State of California has a generous benefits package that includes medical coverage, CalPERS pension upon retirement, two weeks paid vacation per year, two weeks paid sick leave per year, two paid Professional Development Days, one paid Personal Holiday, pre-tax parking fee program.

TRANSPORTATION REIMBURSEMENT

• Public transit (mass transit) passes.

o 100 percent discount on public transit passes sold by state agencies, up to the monthly exclusion amount provided by the Internal Revenue Service (IRS).

o 100 percent reimbursement on public transit passes purchased by state employees, up to the monthly exclusion amount provided by the IRS.

• Vanpool drivers and riders

o 100 percent reimbursement on the monthly fee, up to the monthly exclusion amount provided by the IRS.

Click here to view all the attractive benefits available to state employees! Benefit information can be found on the CalHR website and the CalPERS website.

Personal Leave Program (PLP) 2025

Personal Leave Program (PLP) 2025 - Salaries do not reflect reductions from the Personal Leave Program, please see the applicable  Memorandum of Understanding (MOU) for additional information on the length and percentage of reductions.

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is optional. It may be included, but is not required.
• Statement of Qualifications - (SOQ) Please see the Special Requirements section of this job advertisement for detailed instructions for the SOQ submission.