IT Cybersecurity Specialist - Career Ladder Group

Polk County Board of County Commissioners•Bartow, FL

1d•$60,590 - $66,810•Onsite

About The Position

The Cybersecurity Specialist supports the Polk County Board of County Commissioners by contributing to information security programs, including security awareness, security information and event management (SIEM), and vulnerability management. The role supports planning, implementation, tracking, and reporting of cybersecurity initiatives while developing hands-on experience with the tools and methods used by the cybersecurity team. Working under the guidance of senior cybersecurity staff, the specialist develops technical skills and contributes to maintaining secure systems and practices. The position helps ensure security best practices are followed across new and existing technologies, while maintaining integrity and ethical conduct. This is a full-time position based in Polk County, Florida. Flexibility may be required to support emergencies outside regular business hours. During emergencies, employees may be assigned duties, locations, or work schedules outside their normal scope to meet county and resident needs.

Requirements

Must possess and maintain a valid Florida driver’s license.
Foundational knowledge of cybersecurity principles, best practices, and compliance standards.
Familiarity with cybersecurity tools, vulnerability assessment concepts, and basic intrusion detection and prevention techniques.
Basic understanding of IT security practices, networking concepts, and incident response fundamentals.
Awareness of common attack vectors, threats, and anomaly detection concepts.
Ability to assist in identifying and analyzing vulnerabilities and security events under supervision.
Developing skills in monitoring and responding to cybersecurity incidents, with appropriate escalation.
Ability to develop documentation, reports, and training materials, and to prepare detailed reports and after-action reports.
Strong analytical thinking and willingness to learn new tools and technologies.
Effective communication skills for working within a team environment.
Ability to follow established processes and contribute to continuous improvement.
For Specialist I: Associate’s degree in cybersecurity, networking, information technology, or a related discipline; an equivalent combination of education, training, and experience may be considered. Requires one approved certification: CompTIA Security+, CompTIA Network+, or ISC2 SSCP. Equivalent or more advanced certifications listed in the posting may satisfy this requirement.
For Specialist II: Minimum 2 years of BoCC Information Security team experience, a basic vendor/platform certification related to tools used by the Information Security team, and one approved certification: CompTIA CySA+, GIAC GCIH, or SANS SSAP – Security Awareness Professional.
For Specialist III: Minimum 3 years of BoCC Information Security team experience, an advanced vendor/platform certification related to tools used by the Information Security team, and one approved certification: CompTIA SecurityX (formerly CASP+), GIAC GCIA, GIAC GMON, GIAC GRID, or ISC2 CGRC.
A comparable combination of related training and experience may substitute for minimum qualifications, except where licensure is required. Relevant external experience may qualify as equivalent.
External candidates must obtain the applicable industry certification within 6 months of hire.

Responsibilities

Assist with configuring and executing vulnerability scans, analyzing results, and tracking remediation.
Support administration of security awareness tools and training schedules, including phishing simulations.
Monitor security dashboards, help investigate anomalous findings, and escalate issues as appropriate.
Research, monitor, and assess security threats, anomalies, and malicious activities.
Develop and maintain security documentation, including procedures, workflows, and incident reports.
Establish secure baselines for new systems, hardware, and applications.
Evaluate the criticality of findings using CVE ratings and prioritization guidance from senior staff.
Generate key performance indicators and metrics.
Collaborate with internal teams to resolve vulnerabilities within established timelines.
Help ensure compliance with cybersecurity standards and regulations.
Support SIEM tools and processes.
Assist with security assessments, internal reviews, and preparation for external audits.
Support automation efforts to improve configuration consistency and operational efficiency.
Consult with stakeholders on secure practices, defensible network architecture, and compliance protocols.
Perform other duties as assigned.