Security Engineer

Under the direction of the Information Technology Manager II, the incumbent acts as a security engineer, performing security analysis on a complex networked environment. The incumbent is responsible for working on security problems that are complex and assists with security system development and recommendations, configuring, managing and maintaining the technical aspects of the information security architecture. The incumbent is responsible for providing technical expertise in the implementation of policies and standards of information security, confidentiality, privacy, integrity, auditability and controllability of information in the information technology environment. The incumbent provides ongoing security analysis of the network and devices connected to the network. The incumbent recommends the appropriate information security architecture and infrastructure to management and customers. Responsibilities also include gathering information and providing in-depth analysis on investigations, vulnerability assessments and the integration and management of security software into the overall statewide Legislative network. The incumbent works independently or assists, as a team member, project manager and security engineer on complex security initiatives, where the consequences of unmitigated security vulnerabilities could have a high to extremely high impact on the business success of the Office of Legislative Counsel and its customers., The Office of Legislative Counsel (OLC) is a small civil service department whose mission is to provide responsive nonpartisan and confidential legal services and information technology support services to the California State Legislature and in support of the legislative process. This position is located in the heart of downtown Sacramento. The State of California provides excellent health benefits and retirement options, sick leave and vacation accrual, and paid state holidays. OLC employees are excluded from collective bargaining and, therefore, receive enhanced benefits., * Lead or assist with vulnerability scans or vulnerability assessments

• Assist in reviewing and prioritizing security patches provided by vendor
• Design, develop, test and manage the deployment of security software and tools
• Maintain and test automated processes, scripts and programs to deploy security software using client management tools
• Lead engineers in reviewing and analyzing log data and addressing issues discovered
• Work with existing organizational teams to share knowledge and suggest improvements
• Maintain professional internal/external relationships that meet the organization’s core values
• Manage and maintain a schedule of work to ensure project scheduled and deliverables are completed within agreed timeframes
• Analyze and evaluate hardware and software, including development tools, to produce documented alternatives and recommendations for the purpose of obtaining, replacing or upgrading existing hardware and software

In addition to evaluating each candidate’s relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

• Three (3) or more years of experience in using tools such as Splunk, Forescout, Tenable, Qualys, Sectigo or other security tools.
• Knowledge of technical architectures and practices utilized to develop comprehensive security architectures.
• Knowledge of forensic tools and procedures. Knowledge of the metrics associated with analyzing the performance of components of the information technology environment.
• Knowledge of various encryption methods and associated implementation.
• Knowledge of the Legislative Data Center IT environment and how it relates to security in order to facilitate customers, managers, and technical staff in the development or revision of risk management policies.
• Professional certification through the Information Security Certification Program of the International Information Systems Security Certification Consortium (ISC)² Institute as CISSP (Certified Information Systems Security Professional), SSCP (Systems Security Certified Practitioner) or through the SANS Institute’s Global Information Assurance Certification (GIAC) Program, or other similar certification, is highly desirable.
• Demonstrated strong interpersonal skills.
• Ability to work in an organized and efficient manner while under pressure in order to meet challenging time constraints.
• Ability to adapt to change priorities and manage multiple concurrent assignments and projects., * Knowledge of technologies such as Splunk, Qualys, Tenable, Sectigo, McAfee/Trellix, Sectigo
• Knowledge of Java, C and C++, Python, SQL, MacOS, Linux, Debugging, Troubleshooting, Data Management, Cybersecurity
• Knowledge of the information security marketplace and trends
• Knowledge of methods to investigate and resolve information security issues
• Experience leading Incident Response efforts in a multi-vendor environment
• Ability to recognize the need to seek the counsel of others appropriately prior to arriving at any conclusions or deciding on a unilateral course of action
• Strong analytical and problem-solving skills
• Ability to apply systems life cycle management concepts used to plan, develop, implement, operate, and maintain information systems
• Ability to positively influence others to achieve results that are in the best interests of the organization
• Ability to communicate change impacts and change activities through various methods
• Ability to develop decision making documents, and assess and understand complex business processes and customers’ requirements to ensure new technologies, architectures, and security products will meet their needs
• Knowledge of principles, methods and procedures for designing, developing, optimizing, and integrating systems in accordance with best practices
• Professional and personable demeanor, with excellent communication skills