Information Technology Security Engineer I

County of Madera•Madera, CA

2d•Onsite

About The Position

Under general supervision performs a variety of professional duties in support of Countywide information security related operations and activities; participates in the design, implementation, and maintenance of security measures to protect the County’s data and infrastructure from unauthorized access, cyber threats, and other potential risks; collaborates with Information Technology staff to identify vulnerabilities, recommend security policies and procedures, and provide guidance on best practices; and performs related duties as assigned. Supervision Received and Exercised Receives general supervision from assigned supervisory or management personnel. Exercises no direct supervision of staff. Examples of Duties The job functions listed below are not inclusive or exclusive and are intended only as illustrations or examples of the various types of work that may be performed in various divisions/departments. Types of work performed shall be within the scope and licensure (if required) for the classification. Reasonable accommodation will be made when requested and determined by the County to be appropriate under applicable law. Some duties, knowledge and abilities may be performed in a learning capacity by positions at the entry (I) level.

Requirements

Security concepts, including threat modeling, risk assessment, security controls, and security architecture design; security tools and platforms for monitoring, intrusion detection, audit log evaluation, and vulnerability assessment.
Network security protocols, technologies, and best practices, including but not limited to firewalls, intrusion detection/prevention systems, VPNs, and network segmentation.
Security considerations and best practices for cloud computing environments, including securing cloud-based applications, data, and services.
Security compliance frameworks and industry standards.
Threat intelligence sources and cyber-attack trends.
Incident response methodologies and best practices.
Data security and disaster recovery systems and procedures.
Principles and practices of developing and maintaining technical documentation, files, and records.
Network design and Cisco networking.
Applicable federal, state, and local laws, codes, and ordinances relevant to the area of responsibility.
Techniques for providing a high level of customer service by effectively dealing with the public, vendors, contractors, and County staff.
The structure and content of the English language to effectively perform the work.
Modern equipment and communication tools used for business functions and program, project, and task coordination, including computers and software programs relevant to work performed.
Identify and deploy controls and resolutions to system vulnerabilities emerging from legacy system configurations and/or configuration oversight.
Configure enterprise network equipment including but not limited to firewalls, routers, servers, and other networking equipment.
Design, implement, and support security technology tools to improve the overall cybersecurity posture of the County.
Approach security holistically, considering the entire technology ecosystem and its interdependencies, and making informed decisions that align with overall security objectives.
Perform post-incident analysis, identifying root causes, and recommending process improvements to prevent similar incidents in the future.
Promote a culture of security awareness and educating staff at all levels about the importance of cybersecurity best practices.
Think critically and solve complex computer/network/security issues and problems.
Make risk-based decisions by evaluating the potential impact of security vulnerabilities and incidents on the County systems.
Seek out signs of potential security threats by analyzing logs, traffic patterns, and other indicators to proactively identify and address risks.
Maintain accurate files and records.
Prepare clear and concise reports, correspondence, and other written materials.
Use tact, initiative, prudence, and independent judgment within general policy and procedural guidelines.
Respond to and effectively prioritize a high volume of phone calls and other requests for service.
Understand, interpret, and apply all pertinent laws, codes, regulations, policies and procedures, and standards relevant to work performed.
Independently organize work, set priorities, meet critical deadlines, and follow-up on assignments.
Effectively use computer systems, software applications relevant to work performed, and modern business equipment to perform a variety of work tasks.
Communicate clearly and concisely, both orally and in writing, using appropriate English grammar and syntax.
Establish, maintain, and foster positive and effective working relationships with those contacted in the course of work.
Equivalent to a bachelor’s from an accredited college or university, or equivalent technical certification, with major coursework in computer science, information technology, or a related field.
Two (2) years of information technology networking, desktop, or security experience in a professional, analytical capacity.

Nice To Haves

Some positions may require possession of, or ability to obtain, nationally recognized industry specific technical certification pertinent to the assigned area(s) of responsibility.
Possession of, or ability to obtain by the time of appointment, an appropriate California driver’s license.

Responsibilities

Develops and deploys advanced security solutions, including, but not limited to firewalls, intrusion detection/prevention systems, encryption technologies, and specialized and specific information security tools, to safeguard county systems and data.
Oversees the operation of security tools, conducts regular security assessments, and analyzes logs and alerts to identify and address potential vulnerabilities or incidents.
Performs periodic vulnerability assessments and participates in penetration testing to identify weaknesses in systems and applications, recommends remediation actions, and implements upon approval.
Leads incident response efforts, investigating and mitigating security breaches, coordinating with internal teams, and documenting incident details.
Works closely with IT personnel to integrate security measures into the entire IT infrastructure, providing guidance on security architecture and risk mitigation.
Develops and conducts security awareness training programs to educate staff about security risks, best practices, and proper handling of sensitive data.
Participates in security audits and assessments, ensuring compliance with applicable regulations, laws, and industry standards.
Participates in the timely deployment of security patches, updates, and resolutions to system legacy and/or configurations flaws across systems to address vulnerabilities and maintain system integrity based on risk priority.
Creates comprehensive technical documentation, including security guidelines, user guides, tip sheets, incident reports, and vulnerability assessment reports.
Participates in IT projects providing cybersecurity expertise, contributing to project planning, and striving towards successful implementation.
Stays abreast of industry trends, emerging technologies, and best practices, proposing innovative solutions for business enhancement.
Enforces information technology operational policies and procedures.
Attends and participates in staff meetings and other meetings as requested.
Performs related duties as assigned.