Job Description

Job Description and Duties

This position offer an exciting opportunity to participate in delivering a new Comprehensive Child Welfare Information System (CCWIS) with Child Welfare Digital Services (CWDS), a unique collaboration involving the California Health and Human Services Office of Technology and Solutions Integration (CalHHS OTSI), the California Department of Social Services (CDSS), and California's Counties and Tribes.

Under the direction of the Information Security Chief (Information Technology Manager I), the Information Technology Specialist I (Information Security Analyst) will develop and maintain a secure posture for CWDS projects.

Duties include:

• Execution of Penetration and Vulnerability Scans,

• Respond to, investigate, and resolve Security alerts and Incidents

• Perform appropriate follow-up tasks with partner teams and CWDS leadership to report and help mitigate vulnerabilities.

• Define and drive implementation of security policies, standards, and procedures as necessary in adherence of state and federal compliance requirements.

• Act in accordance with Code of Ethics and demonstrate professionalism and respectful interactions with internal and external partners.

You will find additional information about the job in the .

Working Conditions

This position provides telework opportunities, including the ability to work remotely.

Special Requirements

• The position(s) require(s) a Background Investigation be cleared prior to being hired.

Background Check:  All applicants shall be subject to a pre-employment background investigation. The investigation will consist of completion of a pre-employment questionnaire, fingerprinting, and an inquiry to the Department of Justice to disclose criminal records.

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

* Knowledge of Information Security Concepts, Risks, and Best Practices

* Information Security Certification(s) in active status is desirable.

* Experience in security control frameworks and practical application (NIST 800-53, etc.)

* Well developed analytical skills to evaluate current security practices and potential security risks.

* Experience in security Incident management using NIST frameworks

* Experience in using one or more Security Vulnerability scan tools.

* Experience applying federal state, and/or local security policies, standards, and procedures.

* Knowledge of Infrastructure as a Service environments such as AWS.

* Knowledge of Security Information and Event Management (SIEM) tools such as Splunk.

Benefits

Benefit information can be found on the CalHR website and the CalPERS website.

Additional Information

This position is designated as required to file a Statement of Economic Interest (Form 700) under the California Health and Human Services Agency Conflict of Interest Code. The position is responsible for the making, participating in the making, or using his or her official position to influence the making of governmental decisions that may potentially have a material effect on his or her personal financial interests. The appointee is required to complete a Form 700 within 30 days after his or her appointment. Failure to comply with the Conflict of Interest Code requirements may void the appointment.

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• Statement of Qualifications -

  Applications received without the Supplemental Questionnaire attached and question addressed as stated may not be considered.

  Without the use of Artificial Intelligence (AI) or ChatGPT, please answer the following question:

  1) What skills, certifications and/or experience would you continue to seek in this type of role?  Of the core cybersecurity domains and given the Duty Statement, which do you believe will be exercised most in this role?  Please explain why, using one or more examples .”

Job Tags

Full time, Permanent employment, Remote work, Work at office, Local area,

Similar Jobs