Senior Cybersecurity Analyst (Senior Information Technologist)

County of Orange • Santa Ana, CA

6d

About The Position

The Orange County Information Technology (OCIT) – Enterprise Cybersecurity Operations Team is seeking an experienced and dynamic supervisor who will oversee and assist a team of cybersecurity analysts in the continuous monitoring of the County's enterprise environmental assets, analyzing threats, mitigating vulnerabilities, detecting compromises, and conducting incident response. The Senior Cybersecurity Analyst will be responsible for the design, configuration, implementation, and ongoing support of County Enterprise tools. This position requires strong analytical and comprehension skills with written and communication experience.

Requirements

• At least three (3) years of security-related work experience in a cybersecurity, enterprise IT, or multidisciplinary IT environment.
• Understanding of the NIST 800-53 framework and application of its controls in operational security
• Understanding network protocols, routing and switching, LAN/WAN, remote access, and encryption protocols
• Understanding and applying network security concepts and troubleshooting enterprise firewalls, IDS/IPS, DNS Security, and WAF (Web Application Firewall)
• Foundational knowledge of Microsoft Office365, Azure Cloud, and related security concepts
• Utilizing security tools such as SIEM, SOAR, EDR, DLP, and Web Filter/Proxy
• Proficiency in scripting languages and PowerShell
• Installing, configuring, and supporting all varieties of Microsoft Windows Services and platforms
• Implementing enterprise security best practices including encryption, implicit and explicit permissions, multi-factor authentication, auditing and digital forensics, and data retention
• Serving as a department liaison for operational security matters, requests, and issues
• Working collaboratively and establishing rapport with staff, managers, and people across County departments
• Leading and training cybersecurity analysts on best practices
• Building and maintaining positive forward focused customer-oriented work environments
• Responding quickly, courteously, and proficiently to customer service requests
• Soliciting feedback and adjusting customer service requests to fit into business improvement
• Clearly conveying information technology concepts and terminology with both technical and non-technical staff at all levels within and outside the agency
• Preparing and maintaining technical documentation of department processes and procedures

Nice To Haves

• An Associate's or higher in Information Computer Sciences, Information Computer Technology, Information Systems, or a related field
• CompTIA Security+
• CompTIA CySA+
• (ISC))² CISSP- Certified Information Systems Security Professional
• (ISC))² CISM - Certified Information Security Manager
• GCIL- GIAC Certified Incident Leader
• GEIR - GIAC Enterprise Incident Response
• GSOM- GIAC Security Operations Manager
• GSOC- GIAC Security Operations Certified

Responsibilities

• Overseeing daily operations of the SOC
• Ensuring the service ability and integrity of SOC equipment and tools
• Supporting SOC efforts in digital forensics and eDiscovery
• Serving as the subject matter expert on system security tools, including but not limited to SIEM, SOAR, EDR, IAM, PAM, IPS/IDS, Web Proxy Firewall, DLP, Email Security, and WAF, and providing technical leadership on toolset enhancements
• Leading and performing threat hunting activities such as analysis of threat intelligence, detection and evaluation of IOCs, and escalation of incidents
• Evaluating vendor solutions, making recommendations, and leading projects for deployment and/or enhancement of security systems
• Participating in the incident response team and executing the County Incident Response Plan and cyber incident playbooks
• Reviewing cybersecurity requests against normal operational security processes and providing approval or escalation

Benefits

• Salary may be negotiable within the applicable range of the classification and successful candidate's qualifications, subject to appropriate authorization.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree