ESEC Security Analyst

Are you an experienced Security Analyst? Are you ready to take the next step in your career? If so, consider an opportunity at State Fund. State Fund’s Enterprise Security Technical unit has an exciting opportunity for a Security Analyst! The selected candidate will work under the leadership of the Enterprise Security Management and Chief Information Security Officer (CISO). Responsibilities Develop and deliver information security awareness training to the State Fund using multiple media Conduct simulated phishing campaigns and perform analysis Investigate and analyze incoming suspicious attempts and make recommendations to stakeholders Evaluate complex security incident response and forensic analysis Analyze threat intelligence and recommend mitigating controls for new and persistent threats Interface with all State Fund programs and advise on projects’ security risks and mitigating controls Train new team members including, but not limited to security awareness, incident response, forensic, and threat intelligence related to tickets/cases Coordinate and consult with software vendors for product utilization including evaluating vendor software packages Develop/maintain information security processes, procedures, job aids, etc. in alignment with security frameworks as needed Assist on security compliance objectives as needed Location – Office Sites Los Angeles, Bakersfield, Eureka, Fresno, Oxnard, Pleasanton, Redding, Riverside, Rohnert Park, Sacramento, San Diego, Stockton, or Vacaville. Candidates should apply to the office location that best aligns with their residence, as periodic in‑office attendance may be required based on operational needs. This position may also require occasional work outside of normal business hours, including evenings or weekends, to support security incident response or other critical business needs. Desirable Qualifications Proficient in effective communication across all organizational levels, adept at engaging with technical team members as well as senior leadership Advanced experience of emerging security risks Working experience with complex security incident response and forensic analysis Working knowledge and understanding of information security risks and mitigations Experience in developing/writing policies, guidelines, standards, and procedures Advanced working knowledge and understanding of security frameworks (e.g., NIST, ISO, PCI, etc.) Proficient knowledge in developing reporting and metric structure Proficient knowledge of Microsoft Office Products (e.g., Excel, Word, and PowerPoint) Certifications such as CISSP are a plus Benefits Alternate Work Schedule options On-the-job training Various health, dental and vision plans to choose from Retirement plans (CalPERS, 401(k) and 457 Deferred Compensation Plans) 11 Paid Holidays Vacation and Sick Leave Employee Assistance Program Professional Development Days Personal Holidays Tuition Assistance/Reimbursement Leadership Training Transit Pass Program

AND MORE

INFORMATION TECHNOLOGY SPECIALIST I