Security Operations Specialist

The Department of Financial Protection and Innovation is recruiting for one Permanent, Full-time Information Technology Specialist I position within the Information Technology Services Division’s Security Unit . This position is to be located in the Sacramento office. This recruitment may be used to fill subsequent vacancies of this position within the next 180 days. Under the general direction of the Chief Information Security Officer (CISO, IT Manager I) the Information Technology Specialist I will serve as department’s Security Operations Specialist. The SOS will ensure DFPI IT systems are protected from threats, monitor systems and respond to alerts, perform investigations and analysis, and implement solutions to improve the Department’s security posture. The SOS will assist the CISO and the Operations Manager in maintaining compliance with state and federal regulations including California Civil Code, the State Administrative Manual (SAM), the Statewide Information Management Manual (SIMM), and the National Institute of Standards and Technology (NIST)., NOTE: Resumes, cover letters, and other materials will not be accepted in place of the required SOQ/SQ. In order to be considered for this position, applicants must submit a Statement of Qualifications (SOQ). The SOQ must be no more than three pages in length, single-spaced, using a 12-point font. It must have the applicant’s first and last name and “Security Operations Specialist” in the upper left corner.

1. Describe your working experience in providing information security support services in an information technology environment.
2. Describe how you stay up-to-date with the latest security vulnerability and attack techniques.
3. Describe what steps you would take in response to an active security threat on your network.

In addition to evaluating each candidate’s relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate: Experience monitoring and assessing security controls in the information system, including review of server logs, firewall activity, systems activity, and security alerts. Experience investigating system alerts and security incidents or attacks, taking appropriate actions to reduce exposure and secure systems and data. Ability to work independently and under direction in small teams as a technical specialist to test, enhance, and maintain network infrastructure to reduce risk and protect data. Knowledge of procedures for incident handling, particularly for analyzing incident-related data and determining the appropriate response. Experience conducting research into security vulnerabilities, suggesting solutions, and implementing risk mitigation strategies through patching and system configuration. Ability to effectively communicate both in writing and verbally.

This job requires reporting on site a minimum of 4 days per week, with the option of one day of telework with an approved agreement., The Department of Financial Protection and Innovation (DFPI) protects consumers and oversees financial service providers and products. The DFPI supervises the operations of state-licensed financial institutions, including banks, credit unions and money transmitters. Additionally, the DFPI licenses and regulates a variety of financial service providers, including securities brokers and dealers, investment advisers, payday lenders and other consumer finance lenders. The DFPI offers benefit packages, competitive salary, a robust training program and opportunities for advancement. Department Website: https://dfpi.ca.gov, State employees may be eligible for health, dental, vision and leave benefits, as well as retirement programs and other benefits. Benefit eligibility may depend on length of service and may be subject to collective bargaining agreements, which are contracts negotiated between the State of California and employee organizations that define employees’ wages, hours and conditions of employment. Other possible benefits include:

• Alternate Work Schedules
• Telework
• Reimbursement Accounts