IT Security Analyst III

County of Riverside•Riverside, CA

2d•Onsite

About The Position

The Riverside County District Attorney’s Office is seeking an experienced Information Security Analyst III to support the office’s security posture. This senior-level role focuses primarily on security monitoring, governance, and incident response, with some emphasis on programming or tool development. The analyst implements and maintains security policies and standards, oversees security compliance, and participates in enterprise risk and governance efforts. The role involves advanced monitoring of intrusion detection systems, firewall logs, and system activity to identify threats and coordinate mitigation. The analyst also supports emergency preparedness and operational resilience by developing and maintaining Emergency Operations Plans, supporting disaster recovery and business continuity activities, and maintaining methodologies for tracking critical assets. The position participates in the security incident response team, evaluates security events, and provides recommendations to management. Additional work includes vulnerability assessments and penetration testing, forensic investigations that preserve evidence integrity, and collaboration with internal departments on secure system designs and enterprise security architecture. The position emphasizes analytical ability, sound judgment, monitoring, governance, and investigative practices rather than programming or systems development. Hands-on experience with SIEM platforms—including alert tuning, review of correlation logic, and triage of SIEM-generated events—is highly desired. Knowledge of log ingestion best practices is preferred; only minimal scripting is needed. This position is in office in Riverside. A successful security clearance conducted by the District Attorney’s Office is required. The employee must maintain a current CISSP certification; a valid California Driver’s License may also be required.

Requirements

Five years of progressively responsible experience in information security.
Extensive experience and knowledge of Linux and Microsoft operating systems.
Experience performing vulnerability scans and penetration tests.
Experience developing or maintaining scripts, routines, or tools used for vulnerability and threat assessments.
Experience coordinating disaster recovery and business continuity activities.
Experience conducting security design reviews and analyses and performing threat and risk assessments.
Experience developing or evaluating plans, principles, and procedures to support security studies and provide professional analysis of methods and objectives.
Successful completion of the education required to possess and maintain a current CISSP certification within (ISC)² guidelines; must possess and maintain the certification.
Knowledge of standard security practices; network architecture, routing, and TCP/IP protocols; Linux and Microsoft operating systems; project planning and management; third-party applications and native scripts and languages; risk assessment processes and practices; and general business processes and standards relevant to the assignment.
Ability to perform cyber-attack trend analysis and project planning and management; independently analyze complex business processes; manage evidentiary processes and chain of custody; conduct investigations and coordinate security anomalies and events; interact with customers and vendors by phone and in person; perform business continuity planning, documentation, and evaluation; and establish and maintain customer service and relationships.
Successful security clearance conducted by the District Attorney’s Office is required.
A valid California Driver’s License may be required.
Applicants must be legally authorized to work in the United States at the time of application; the County does not provide employment-based visa sponsorship.

Nice To Haves

Hands-on experience with SIEM platforms, including tuning alerts, reviewing correlation logic, and triaging SIEM-generated events is highly desired.
Knowledge of log ingestion best practices is preferred.
Military or law enforcement experience is desired.

Responsibilities

Implement and maintain global security policies, standards, guidelines, and procedures to ensure ongoing security compliance; recommend security improvements and ensure technology decisions comply with Enterprise Security Architecture.
Develop, analyze, and maintain Emergency Operations Plans; develop and implement tracking and inventory methodologies for critical assets.
Perform vulnerability scans and penetration tests; develop and maintain scripts, routines, and software for vulnerability and threat assessments; coordinate County disaster recovery and business continuity tasks.
Participate in the security incident response team, evaluate security incidents, develop solutions, and communicate results to management.
Manage computer crime or incident scenes, including investigative approach, search, seizure, collection, evidence preservation and transportation, computer forensic analysis, and case management; use security tools and prepare reports.
Monitor and review intrusion detection systems and firewall logs, analyze events and patterns, and coordinate mitigation responses.
Review firewall and router rules, access control lists, system logs, and access lists; research technical and security topics and maintain information on industry trends.
Perform design reviews and analyses and threat and risk analyses; develop and evaluate plans, principles, and procedures for customer security studies and provide professional analysis of methods and objectives.
Develop and analyze information security models and maintain a methodology for tracking Security Plans for sensitive and critical applications and general support systems.
Respond to and assist with information security assessment requests; evaluate vendor products and services; advise management on risks and security best practices.
Coordinate implementation and modification of enterprise and departmental DMZs and collaborate with departments on security solutions.