Information Security Analyst



Information Security Analyst

Salary

$101,997.55 - $123,974.93 Annually

Location

Santa Rosa, CA

Job Type

Full-Time

Job Number

21/09-0118-O

Department

Information Systems Department (ISD)

Opening Date

09/09/2021

Closing Date

9/30/2021 11:59 PM Pacific

Bargaining Unit

05

Position Information

The County of Sonoma Information Systems Department (ISD) is seeking an experienced Information Security Analyst to join our team.

 Starting salary up to $57.82/hour ($120,677.28/year), plus an additional $3.45/hour cash allowance*


Working at the County of Sonoma offers expansive opportunities for growth and development, the ability to be a part of a challenging and rewarding work environment, and the satisfaction of knowing you're working to better our communities. You can also look forward to excellent benefits* including:

  • An annual Staff Development/Wellness Benefit allowance up to $500 and ongoing education/training opportunities
  • Competitive vacation and sick leave accruals, 12 paid holidays, and an additional 8 floating holiday hours per year
  • Significant portion of health care premiums paid by the County and access to several health plan options
  • County contribution to a Health Reimbursement Arrangement to help fund post-retirement employee health insurance/benefits
  • May be eligible for up to 8 weeks (320 hours) of Paid Parental Leave after 12 months of County employment
  • Retirement fully integrated with Social Security
  • Eligibility for a salary increase after 1,040 hours (6 months when working full-time) for satisfactory work performance; eligibility for a salary increase for satisfactory performance every year thereafter, until reaching the top of the salary range
The Sonoma County Information Systems Department (ISD) provides a wide array of IT Services to 29 departments and agencies, and almost 4,000 employees. We are responsible for interconnecting thousands of devices throughout the County of Sonoma and Public Safety Networks. Our work environment includes leading edge technology and significant training opportunities to grow your skills and prepare for advancement opportunities within the department.

About the position

As an Information Security Analyst, you will be responsible for the proactive protection of the confidentiality, integrity, and availability of information in the custody of, accessed by, transmitted, or processed by the County. You will interact with stakeholders across all technical teams, external entities, and management, and will monitor, analyze, improve, and coordinate activities to maintain secure system access.  Additionally, you will:

  • Identify security requirements using security, cloud, and vendor risk assessments, business impact assessments, vulnerability scanning tools, and other security frameworks and standards
  • Assist in the remediation of vulnerabilities by identifying patches, configurations, and compensating controls
  • Support third-party audit/assessment requests for documentation on processes, policies, procedures, and configurations
  • Continually improve incident response processes by serving as a member of the Security Incident Response Team, assisting with the testing and execution of the Security Incident Response Plan, and creating and maintaining documentation related to incident handling and investigation procedures
  • Deliver security awareness training, tech talks, and other awareness campaigns to spread security knowledge 
  • Assist with processing and gathering information related to litigation holds
  • Prepare security assessment reports and other technical documentation as needed
  • Stay up to date with trends in the information security community including new tools, vulnerabilities, methodologies, and products 
What you bring

Ideal candidates will possess:

  • A thorough understanding of computer and network security, including areas such as firewalls, IPS, SIEM, encryption technologies, and network protocols
  • Demonstrated knowledge of common cyberattack vectors and defenses
  • Experience with tools and techniques for penetration testing and vulnerability scanning
  • Applied knowledge of common security standards, controls, and frameworks
  • Experience supporting security monitoring systems
  • Effective written and oral communication
  • Complex analysis and problem solving skills 
Following current Public Health Orders and department needs, ISD positions may initially work both remote as well as on-site, transitioning to full-time on-site or hybrid remote/on-site when required and allowed.

Please Note: This position will be required to have access to Sheriff's Office or Probation Department facilities or view data or work with information systems for these departments. This requires that a more extensive "Security Clearance" be performed, after hire, by the Sonoma County Sheriff’s Office. Successful completion of the probationary period will be contingent upon passing the security clearance, which includes a Live Scan fingerprint based check of California Department of Justice (DOJ) and Federal Bureau of Investigations (FBI) criminal records. If you are offered a position which requires a security clearance, the job offer letter will clearly specify this as a condition of the probationary period.

This recruitment is being conducted to fill an Information Security Analyst position in ISD. This employment list may also be used to fill future full-time, part-time, or extra-help (temporary) vacancies as they occur during the active status of the list. Qualified County employees who wish to be considered for future positions should consider applying to this recruitment.  The Civil Service title for this position is Systems Software Analyst.

*Salary is negotiable within the established range. Benefits described herein do not represent a contract and may be changed without notice. Additional information can found in the Service Employees International Union Local 1021 Memorandum Of Understanding (SEIU MOU).

APPLICATION SUBMISSIONS REQUIRE THE SUPPLEMENTAL QUESTIONNAIRE BE COMPLETED.

Minimum Qualifications

Education: Any combination of education and training which would provide the opportunity to acquire the knowledge and abilities listed. Normally, graduation from a four year college or university with major coursework in computer science, information systems, or a closely related field would provide this opportunity.

Experience: Any combination of training and experience which would provide an opportunity to acquire the knowledge and abilities listed. Normally, three years of technical professional experience involving systems analysis, programming, systems engineering, or similar field in a multi-platform information systems environment including experience installing and maintaining systems software and working with database structures. Additional, highly relevant professional level experience may be substituted for the required education.

License:  Possession of a valid driver's license at the appropriate level including special endorsements, as required by the State of California, may be required depending upon assignment to perform the essential job functions of the position.

Knowledge, Skills, and Abilities

Considerable knowledge and understanding of: operating systems and software products; database principles and design; data collection and classification procedures; database and systems problem identification, tracking, resolution, and vendor support; structured coding and analysis; application development products; specific programming techniques and languages; mainframe, mid-size, and client-server network systems capabilities and operations; methods and techniques of troubleshooting hardware, software and inter-connectivity problems; principles of data security; methods and techniques of providing support to staff and end users.

Working knowledge and understanding of: local and wide area network design, management, and operation; the inter-relationship of mainframe, PC, LAN, Network and telecommunications systems including hardware components, software applications, operating systems, and documentation; principles, methods, and techniques of systems analysis.

Ability to: plan, design, upgrade, install, and tune systems software; create systems specifications; provide technical support related to systems software; write and modify instructions, procedures, manuals, documentation; analyze systems problems, develop effective solutions, and prepare cost estimates; work cooperatively and effectively with staff, customers, and vendors; perform a variety of tasks in a consistent and accurate manner; analyze and evaluate information, problems, and situations and develop an effective course of action; prepare clear, concise and accurate oral and written reports.

Selection Procedure & Some Helpful Tips When Applying

  • Your application information and your responses to the supplemental questions are evaluated and taken into consideration throughout the entire selection process.
  • You should list all employers and positions held within the last ten years in the work history section of your application. Be as thorough as possible when responding to the supplemental questions.
  • You may include history beyond ten years if related to the position for which you are applying. If you held multiple positions with one employer, list out each position separately.
  • Failure to follow these instructions may impact your competitiveness in this process or may result in disqualification.
Please visit Getting a Job with the County of Sonoma to review more detailed information about the application, examination, and department selection processes.

APPLICATION SUBMISSIONS REQUIRE THE SUPPLEMENTAL QUESTIONNAIRE BE COMPLETED.

Responses to supplemental questions will be scored using position-specific criteria. Please provide specific and detailed responses of a reasonable length to allow for a thorough assessment of your qualifications. Responses which state "See Resume" or "See Application" may be considered insufficient and therefore may not be scored.

The selection procedure will consist of the following examination:

An Application & Supplemental Questionnaire Appraisal Examination (weight 100%) will be conducted to evaluate each applicant's application and supplemental questionnaire for satisfaction of minimum qualifications (pass/not pass); and for educational coursework, training, experience, knowledge, and abilities which relate to this position. Each applicant will be evaluated based on the following criteria:

  • Relevance of work history, related experience, and achieved level of education and/or training as described in the application and responses to the supplemental questions.
Candidates demonstrating possession of the minimum qualifications will be placed on an employment list in order of most qualified to least qualified based on the achieved score received in the Application & Supplemental Questionnaire Appraisal Examination. Scores may be adjusted based on such factors as number of candidates, anticipated vacancies, past practice, and natural breaks in the scores achieved by this group of candidates.

ADDITIONAL INFORMATION

A background investigation is required prior to employment. Candidates referred to departments for a selection interview are typically required to sign authorization and release forms enabling such an investigation. Failure to sign prescribed forms will result in the candidate not being considered further for that vacancy. Reference information will not be made available to applicants.

For positions that are required to have access to Sheriff’s Office or Probation Department facilities, a more extensive “Security Clearance” will be performed after hire. Successful completion of the probationary period may be contingent upon passing the security clearance, which may include completion and review of a Personal History Statement packet, Live Scan fingerprint based criminal history checks, warrant checks, written reference checks, etc.* If you are offered a position which requires a security clearance, the job offer letter will clearly specify this as a condition of the probationary period.

Additional requirements, such as successful completion of a physical exam, drug screen, etc., may apply depending on the duties and responsibilities of the position. If you receive a conditional job offer for the position, the requirements upon which the offer are contingent will be outlined in the conditional job letter. You may also review the Job Classification Screening Schedule to determine the requirements for this position.

IMPORTANT INFORMATION: As the largest employer in Sonoma County, the Board of Supervisors has adopted a vaccination and testing policy to help mitigate transmission of COVID-19. All County employees will be required to either have documented proof of full COVID-19 vaccination on file or consent to weekly COVID-19 testing.

HOW TO APPLY

Applications are accepted online at: www.yourpath2sonomacounty.org. Paper applications may be submitted by person, fax (707-565-3770), email, or through the mail. All applications and appropriate supplemental information as outlined in the job bulletin must be RECEIVED by the time and date specified on the first page of this job announcement. Applications received after the recruitment closes will not be accepted.

The County of Sonoma values diversity and is dedicated to creating a workplace environment that provides individuals with a sense of belonging. We are committed to having a diverse workforce that is representative of the communities we serve. The County is proud to be an Equal Opportunity Employer where all aspects of employment are based on merit, competence, performance, and business need.

HR Analyst: MN
HR Technician: RR

IMPORTANT NOTE: Benefits described herein do not apply to Extra Help positions.

COUNTY OF SONOMA BENEFITS: GENERAL*

These are some of the excellent benefits the County offers:
 
Paid Time Off: Competitive vacation and sick leave accruals; 12 paid holidays, and an additional 8 floating holiday hours per year; and may be eligible for up to 8 weeks (320 hours) of Paid Parental Leave after 12 months of County employment.
 
Health Plan: Choice of five health plans (a PPO, EPO, HMO, and two deductible HMOs) with a County contribution toward the premium (the contribution amount varies by bargaining unit. For specific details, please refer to the applicable MOU). A County contribution to a Health Reimbursement Arrangement is available for some bargaining units.

Cash Allowance: In addition to monthly salary, a cash allowance of approximately $600 per month.

Retirement: Fully integrated with Social Security. For more information regarding eligibility, retirement contributions, and reciprocity with prior public service, please visit https://scretire.org/active-/-deferred/when-you-are-hired.
 
IRS 457 Plan: Pre-tax employee contribution up to the IRS annual maximum.
 
Retiree Medical: County contribution to a Health Reimbursement Arrangement to help fund post-retirement employee health insurance/benefits.

Plus excellent dental, vision, disability, life insurance, professional development, and more.

For answers to specific questions regarding the employment process and more details about benefits or retirement, please contact Human Resources at (707) 565-2331. Additional details about benefit and compensation packages can be found in the MOUs located at https://sonomacounty.ca.gov/administrative-support-and-fiscal-services/human-resources/divisions-and-units/employee-relations/labor-agreements-and-salary-resolution. For specific information about health and welfare benefits including plan options, coverage, and premium amounts go to https://sonomacounty.ca.gov/administrative-support-and-fiscal-services/human-resources or, contact the Human Resources' Risk Management-Benefits Office at benefits@sonoma-county.org or (707) 565-2900.

*IMPORTANT NOTES: Benefits described herein do not represent a contract and may be changed without notice.

01
How did you first learn about this opportunity?
  • Association of Bay Area Governments (ABAG)
  • CalJobs
  • CareerBuilder
  • Careers in Government
  • College or University
  • Craigslist
  • DICE
  • DiversityJobs
  • Employee of Sonoma County
  • Facebook
  • Glassdoor
  • GovernmentJobs.com
  • Hispanic Chamber of Commerce of Sonoma County
  • Indeed
  • Jobs Available
  • La Voz
  • Latino Service Providers
  • Los Cien
  • Press Democrat
  • sonoma-county.org/www.yourpath2sonomacounty.org
  • Sonoma County Human Resources Office
  • Twitter
  • Women's Organization or Group
  • Other Internet Site
  • Other Publication
02
Please indicate if you would also be interested in part-time or extra-help positions (temporary, intermittent, or seasonal employment) should they become available. Extra-help employees are not eligible for most benefits available to permanent employees. Candidates hired for extra-help positions remain eligible for full or part-time vacancies as they occur during the active status of this list. Check all that apply.
  • Yes, I would also like to be considered for future part-time positions.
  • Yes, I would also like to be considered for future extra-help positions.
  • No, I do not wish to be considered for extra-help or part-time positions.
03
Please describe how your education and experience qualify you for this position. Normally this includes graduation from a four year college or university with major coursework in computer science, information systems, or a closely related field, and three years of technical professional experience involving systems analysis, programming, systems engineering, or similar field in a multi-platform information systems environment. Highly relevant professional level experience may be substituted for the required education.
04
Please detail your experience analyzing and reporting on system security using established frameworks. Provide an example that sufficiently demonstrates your understanding and abilities in this area.
05
Please list and specifically detail what tools you have used to scan for vulnerabilities. Highlight a specific experience including challenges that occurred during the process, issues discovered, and how you addressed them.
06
Please describe your experience with security incident responses. Highlight a specific response, including your role and responsibilities, the steps you took to respond to the incident, and the outcome, and what you learned from that experience that helped prepare you for this position.

Required Question

Agency
County of Sonoma (CA)
Address
575 Administration Drive, Suite 116B

Santa Rosa, California, 95403
Phone
(707) 565-2331