> Markdown version of [/jobs/ext/1188742-information-technology-security-analyst](https://www.wearedevelopers.com/jobs/ext/1188742-information-technology-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Technology Security Analyst - **Company:** The Judicial Council of California - **Location:** Contra Costa County, CA, United States - **Experience:** Experienced - **Salary:** $84,538.0 - $107,894.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, JIRA, Microsoft Azure, Bash Shell, Network Analysis, Cloud Computing Security, CompTIA Security+, Cyber Security, Information Systems, Computer Networks, Event Logging, File System Permissions, Identity and Access Management, Issue Tracking Systems, IT Management, Virtual Private Networks (VPN), Python (Programming Language), Linux Security Modules, Log Analysis, Networking Basics, Network Monitoring, Network Segmentation, Pattern Recognition, Windows PowerShell, Role-Based Access Control, Phishing, Security Information and Event Management, Software Licensing Audit, TCP/IP, Software Vulnerability Management, EndPointSecurity, Scripting, Malware, Firewalls (Computer Science), Microsoft InTune, Falcon Platform, Information Technology, Nessus, Windows Security, Malware Detection, Splunk, Multiplatform, Qualys, Servicenow, Vulnerability Analysis - **Published:** July 5, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=df9dcc53d1b1e13e ## About the Role * Foundational Cybersecurity Knowledge + -Information Security Principles - CIA triad, threat types, risk, controls. + -Common Attack Vectors - phishing, malware, ransomware, credential attacks. + -Security Best Practices - Principle of least privilege, patching, secure configuration. * Systems & Network Knowledge + -Windows Security - Active Directory basics, permissions, event logs. + -Linux Security - file permissions, system logs, SSH hardening. + -Networking Fundamentals - TCP/IP, ports, protocols, firewalls, VPNs, and network segmentation (e.g., isolating IoT/security camera networks). + -Cloud Security Basics - identity and access in Azure/Entra ID, shared responsibility model, cloud workload migration basics, and MDM (Mobile Device Management) concepts. + -One or more scripting languages (e.g., PowerShell, Python and bash). * Security Operations (SOC) Skills + -SIEM Monitoring - log analysis, alert triage, correlation rules. + -Incident Response - detection, containment, documentation, escalation. + -Endpoint Protection - EDR tools, malware detection, remediation steps., * A Bachelor's Degree in computer science, information systems or a closely related field and two (2) years' experience in the fields of cybersecurity, systems administration, operating systems, network analysis and/or management or similar field in a multi-platform information systems environment. OR * An Associate's Degree in computer science, information systems or a closely related field and four (4) years' experience in the fields of cybersecurity, systems administration, operating systems, network analysis and/or management or similar field in a multi-platform information systems environment. OR * An Associate's Degree in computer science, information systems or a closely related field and CompTIA Security+, Cybersecurity Analyst+, Cybersecurity and Infrastructure Security Agency (CISA), or equivalent certification and two (2) years' experience in the fields of cybersecurity, systems administration, operating systems, network analysis and/or management or similar field in a multi-platform information systems environment. Any Combination of experience and education that would provide the required knowledge and abilities is qualifying., Successful completion of fingerprint and a criminal record background check is required prior to appointment and is a condition of employment. Because the Court operates in multiple branches, the employee may be required to travel to other court locations, and possession of a valid California driver's license or the ability to travel between court locations independently is therefore required. All employees of the court who operate a vehicle on court business must certify they possess a valid California Driver's License and required levels of automobile insurance. ## Description Announces an Open recruitment for: Information Technology Security Analyst $84,538.06 - $107,893.97 annually Final Filing - 5:00 pm Thursday, July 16, 2026 The Court is conducting an open recruitment for the classification of Information Technology Security Analyst. Under the direction of the Chief Information Security Officer, the Information Security Analyst supports the protection of court information systems, case-management platforms, and sensitive judicial data. The analyst monitors systems for threats, assists with incident response, and helps maintain compliance with statewide judicial security standards. Only applicants who meet the minimum qualifications by the final filing day may apply. Regular and punctual attendance is essential. Examples of Duties Duties that may be assigned include, but are not limited to, the following: * Network Monitoring - Monitor court networks, servers, and applications for suspicious activity or security breaches. * Incident Response - Investigate alerts, document incidents, and escalate issues to senior analysts when needed. * Security Tools Management - Assist with operating firewalls, endpoint protection, encryption tools, MDM, and SIEM platforms. * Vulnerability Management - Coordinate monthly vulnerability assessments, maintain the vulnerability dashboard, and collaborate closely with the IT team to prioritize and track patching remediation. * Policy & Compliance Support - Help maintain security policies aligned with Judicial Council standards and statewide IT governance such as CJIS, CLETS, and NIST 800-53 best practices. * Security Awareness & Compliance - Administer simulated phishing campaigns, analyze results, and conduct user follow-ups. Track compliance for mandatory cybersecurity and AI training, and ensure staff sign-off on the Information Systems Security Policy (ISSP). * Email Security Operations - Triage suspicious email reports, verify legitimacy, and perform block or remediation actions directly within the Microsoft 365 tenant. * Documentation & Reporting - Prepare reports on findings, risks, and recommended improvements. * Physical Security - Security camera and physical access management. Assist with camera password change and network segmentation. Security footage requests. * Audit Responsibilities - Conduct regular reviews of privileged access (PIM), monitor Microsoft 365 and on-premises environments for unusual admin connection attempts, conduct general access review (M365/On-prem), verify and monitor MFA activation states, and perform periodically installed software reviews., + -Email Security & Phishing Triage - Analyzing email headers, recognizing phishing indicators, and executing tenant-level blocks or remediation. + -Identity & Access Management + -IAM Concepts - authentication, authorization, MFA, provisioning. + -Identity Auditing - Practical knowledge of privileged access reviews (PIM), Active Directory/Azure account monitoring, and MFA activation tracking. + -Role Based Access Control - applying least privilege in a court environment. * Public Sector & Court Specific Knowledge + -Judicial Data Sensitivity - sealed records, confidential case files. + -Government IT Governance - compliance, audits, documentation. + -Change Management - structured updates, approvals, tracking. + -CJIS Compliance Framework - Understanding of Criminal Justice Information Services (CJIS) standards, specifically regarding authorized access controls and software compliance. * Tools & Technologies + -SIEM Platforms - Splunk, Sentinel, Huntress (even basic familiarity). + -Ticketing Systems - ServiceNow, Jira, Cherwell. + -Vulnerability Scanners - Nessus, Qualys, Forta, OpenVAS. + -Endpoint Security Tools - CrowdStrike, Defender for Endpoint, and Microsoft Intune (MDM). + -Soft Skills & Professional Competencies + -Analytical Thinking - interpreting logs, identifying patterns. + -Technical Writing - documenting incidents clearly for executive review. + -Communication Skills - explaining security issues to non-technical staff. + -Ethical Judgment - handling confidential judicial information responsibly. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities) - [Integrate your Cognitive Assistant with 3rd-party DBs and software](https://www.wearedevelopers.com/videos/249-integrate-your-cognitive-assistant-with-3rd-party-dbs-and-software) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)