Cloud Network Security Operations Engineer

Job Description and Duties

This position is limited term for 12 months but may be extended for an additional 12 months, not to exceed 2 years. This position may become Permanent/FT pending budget approval.

Under administrative direction of the Information Technology Manager II (Chief Information Security Officer) , the Information Technology Specialist III (Cloud Network Security Operations Engineer) performs a variety of complex level tasks in relation to the responsibility of identifying, collecting, examining, and preserving digital evidence using controlled and documented analytical and investigative techniques. This position will support and or maintain cloud security, network security and security operational activities to include secure cloud infrastructure, network controls, network firewalls, incident response, end point protection, penetration testing, vulnerability management, anti-phishing, security awareness training and technical security governance risk and compliance initiatives. This position is a senior subject matter expert and will serve as a liaison between LCI and third-party providers. The incumbent will communicate and actively maintain working relationships with customers for various security controls, security governance and operational information technology security troubleshooting purposes.

You will find additional information about the job in the .

Working Conditions

Persons appointed to this position must be reasonably expected to lift, carry, push, pull, or otherwise move objects weighing up to 30 lbs. with or without a reasonable accommodation. This position involves sitting most of the time and may involve walking or standing for brief periods of time. This position may be eligible to participate in LCI’s hybrid telework schedule. Participation in telework is subject to LCI’s guidelines. Occasional extended hours outside of normal working business hours may be required.

Special Requirements

• Ability to maintain consistent attendance 

• Ability to demonstrate punctuality, initiative, and dependability

• Ability to work independently, while working with others in a small group environment

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

• Experience writing technical documentation that includes system security plans, network flow diagrams, security standards and procedures. 
• Demonstrated problem-solving abilities to manage complex state, local and international security requirements. 
• Successful track record collaborating with technical and non-technical teams to promote ideas to support business enablement. 
• Skill in mentoring and operationally leading security team members.
• Skill in identifying software vulnerabilities. 
• Skill in identifying, capturing, containing and reporting malware and ransomware.
• Experience with HP Aruba ClearPass Policy Manager, Network Address Translation/Internet Protocol (NAT/IP), Cloudflare network security solutions, Cisco switches, Extreme switches, Aruba networks, firewall and demilitarized zone (DMZ) (Perimeter Network) using Palo Alto firewall and Palo Alto web filtering, Prisma SASE and or the equivalent.
• Experience with application security. 
• Experience with Microsoft Sentinel, Defender, or other EDR solutions/SIEMs. 
• Experience in offensive security testing. 
• Experience in leading security investigations to lessons learned activities.
• Experience in architecting and engineering MS Azure infrastructure cloud platforms that include M365, access management, Azure, Purview, eDiscovery and zero-trust principles.
• Skill in applying white-box and black-box software testing. 
• Skill and experience in the cybersecurity kill chain to mitigate thread adversary techniques, tactics, and procedures.
• Strong communication skills to clearly express ideas and concepts, both written and verbally. 
• Ability to perform in a support role and take responsibility for mission-critical secure infrastructure components that include network security, asset vulnerability, security assessment and end point protection risk assessments.
• One or more certifications in cloud, network and security operations of the following: Azure: MS Cybersecurity Architect Expert, Azure Security Engineer Associate, CompTIA: Cloud+, CompTIA Security+, ISC2: CISSP, CCSP, SANS: GCIA, GMON, GPEN, GWAPT, GCTD, GCPN, GCFR, GREM and GCSA. 
• Experience writing technical documentation for workflows, plans, guidelines, policies, standards and procedures to meet business requirements for security assurance and compliance.

Benefits

There are many benefits to joining our team!We offer competitive pay, advancement opportunities, upward mobility, work-life-balance, and for many positions, flexible hours and remote work options. The State of California offers a competitive and comprehensive benefits package, subject to eligibility, such as:

• Medical Benefits, including health , and vision insurance
• Deferred Compensation options: 401k and 457b
• (Vacation/Sick or Annual Leave)
• Paid Holidays
• (College Saving Account)
• School Loan forgiveness under the federal Public Service Loan Forgiveness Program

Benefit information can be found on the CalHR website and the CalPERS website.

Statement of Qualifications (SOQ)

STATEMENT OF QUALIFICATIONS (SOQ)
IT SPECIALIST III

A Statement of Qualifications is required and must be submitted with your application. Applications received without a Statement of Qualifications may not be considered. 

The Statement of Qualifications must be typed, no more than two pages, using Arial 12-point font, and must include the applicant’s name in the header. Do not submit a cover letter in place of the Statement of Qualifications. Please respond to the following:

1. Describe your approach to designing a Zero Trust network architecture, including network segmentation, identity and access management, least-privilege access, and continuous verification. What technologies or security strategies have you implemented in practice? 
2. Describe your experience using a secure-by-design approach to cloud security to meet enterprise security baselines. What specific controls did you prioritize and why?
3. Describe your experience responding to a security incident. Explain your process, prioritization, use of security tools, and communication throughout the stages of the incident. Explain your role in the steps that were taken during the incident, as well as what was done after the incident.

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• Statement of Qualifications -

  A Statement of Qualifications (SOQ)is REQUIRED and MUST be submitted with your application to be considered for this position. Applications received without the SOQ will not be considered. Résumés in lieu of the SOQ will not be considered. 

  Refer to the SOQ Requirement Section of this job posting for the SOQ questions.