Security Engineer (Information Technology Specialist I)

Job Description and Duties Under the direction of the Information Technology Supervisor II, Security Operations Group (SOG) the Information Technology Specialist I (ITS I) works as part of the SOG maintaining the configuration, administration, and monitoring of the SOG’s security systems and tools. Identifies and dissects highly targeted attacks and other suspicious activity using a variety of network-based tools. Provides accurate and rapid reporting of in-depth technical analysis results in written form. Research potential exploitation methods. Identifies and analyzes network security appliance logs. Provides mitigation suggestions in the context of a security incidents, as it relates to the technical analysis of PHISHING, Malware, Anti-Virus, or other artifacts. The ITS I works in the Information Security Engineering domain. This position is supporting work related to BH Connect, which is a 5-year funded program awarded to HCAI. Effective July 1, 2025, specific Bargaining Units and associated Excluded State employees are subject to a salary reduction between 2% - 4.62% in exchange for Personal Leave Program 2025 (PLP 2025) hours each month. For more details about PLP 2025, visit the California Department of Human Resources (CalHR) website. Take a 2-minute survey to tell us why you applied for HCAI! - https://forms.office.com/g/B6eXh2NKpZ You will find additional information about the job in the Duty Statement. Desirable Qualifications In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate: • Experience with vulnerability assessment, security event analysis, security technology (firewall, antivirus, web security, data loss prevention) administration • At least 1 years of Security Information and Event Management (SIEM) experience • At least 1 years of experience implementing security controls around IT Infrastructure and data • Experience with formulating remediation strategies with incident response team • Experience researching and evaluating new and updated technologies • Experience with applying cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, authentication) • Experience with Application Security Risks • Experience with network security architecture concepts • Experience with cyber threats and vulnerabilities • Security certification related to cyber defense, incident response, penetration testing, or security management Statement of Qualifications Instructions A Statement of Qualifications (SOQ) is required. (The SOQ is a separate document with your Name and Job Control number noted on the top, typed in Arial 12 pt font, no more than two pages.) Resumes and cover letters do not take the place of the SOQ. Applications without a clearly titled SOQ or failure to follow instructions above will not be considered for the position. 1. Describe how your knowledge, skills experience, and education relate to the qualifications listed on the job description. 2. Please provide an example of a major security incident affecting the entire organization you’ve responded to. Include all steps taken, from triaging to remediation. 3. Describe how you would identify and address gaps in vulnerability scanning coverage across an enterprise environment containing workstations, servers, network devices, and cloud resources. Include how you would validate asset coverage and report unidentified or unmanaged assets.