Cybersecurity Ops Analyst

Experteer Overview In this role, you will join the County of Orange SOC to protect assets, systems and data from cyber threats. You will manage SIEM monitoring, incident response, and forensics while supporting vulnerability management and risk activities. You’ll mentor junior analysts, contribute to cyber metrics and threat intelligence, and help advance security controls and automation. This is a mission-driven, 24/7 operation with hybrid on-site/remote work that offers meaningful impact on public safety IT security. Compensation / Benefits * Monitor security events across networks and systems * Mentor and guide Tier 1 SOC Analysts * Identify, investigate, and report potential security incidents * Support risk and vulnerability assessments at multiple levels * Contribute to cyber metrics development, maintenance and reporting * Support cyber threat intelligence development and reporting * Assist in automating routine security tasks * Recommend and implement security controls and operational risk mitigations * Evaluate new security tools and technologies and align with IT security strategy * Utilize vetted tools to scan, contain, mitigate and remediate vulnerabilities and intrusions * Assist with government policy implementation (e.g., NIST) and tailor processes * Review system audits and close corrective actions; brief senior staff Tasks * Bachelor in related field and 2 years of related experience (4+ years preferred) * Preferred Certifications: CySA+, Security+ or GIAC GSEC (or similar) * Must pass LiveScan background, department reviews, and drug screen * Proficient programming languages: Python, C++, JavaScript * Experience with SIEM technologies and incident response * Knowledge of IDS/IPS, firewalls, anti-virus/anti-malware * Experience with Sentinel SIEM or similar SIEM tools * Ownership of security incidents and full IR cycle * Adherence to SOC Standard Operating Procedures Key requirements *

operational risk mitigations * Evaluate new security tools and technologies and align with IT security strategy * Utilize vetted tools to scan, contain, mitigate and remediate vulnerabilities and intrusions * Assist with government policy implementation (e.g., NIST) and tailor processes * Review system audits and close corrective actions; brief senior staff Tasks * Bachelor in related field and 2 years of related experience (4+ years preferred) * Preferred Certifications: CySA+, Security+ or GIAC GSEC (or similar) * Must pass LiveScan background, department reviews, and drug screen * Proficient programming languages: Python, C++, JavaScript * Experience with SIEM technologies and incident response * Knowledge of IDS/IPS, firewalls, anti-virus/anti-malware * Experience with Sentinel SIEM or similar SIEM tools * Ownership of security incidents and full IR cycle * Adherence to SOC Standard Operating Procedures Key requirements *