Cloud Security Specialist

Job Description and Duties

The Franchise Tax Board's (FTB) mission is to help taxpayers file tax returns timely and accurately, and to pay the correct amount to fund services important to Californians. The protection of taxpayer information and privacy is one of our foundational principles that support that mission, and you have the opportunity to be directly involved as a valued member of our Security Operations Center (SOC). Under the direction of the SOC Management, you will perform a wide variety of tasks related to cybersecurity monitoring within the FTB SOC, which contributes to the protection of FTB's systems, data, and people. This position is within the Information Security Engineering Domain.

Additional positions may become available (RPA 2526-00094).

Please complete this optional survey letting us know how you heard about this position by .

You will find additional information about the job in the .

Working Conditions

• This position is eligible for limited remote working within California based on departmental guidelines and operational need. FTB has a minimum in-office requirement of two days per week for all positions including those that are eligible for telework. This is subject to change.

Special Requirements

• The position(s) require(s) a Background Investigation be cleared prior to being hired.

This business uses E-Verify in its hiring practices to achieve a lawful workforce. E-Verify is a web-based system that allows enrolled employers to confirm the eligibility of their employees to work in the United States. For more information about E-Verify, please go to .

CALIFORNIA CODE OF REGULATION, SECTION 172: All candidates for, appointees to, and employees in the state civil service shall possess the general qualifications of integrity, honesty, sobriety, dependability, industry, thoroughness, accuracy, good judgment, initiative, resourcefulness, courtesy, ability to work cooperatively with others, willingness and ability to assume the responsibilities and to conform to the conditions of work characteristic of the employment, and a state of health, consistent with the ability to perform the assigned duties of the class. Where the position requires the driving of an automobile, the employee must have a valid state driver's license, a good driving record and is expected to drive the car safely. The foregoing general qualifications shall be deemed to be a part of the personal characteristics of the minimum qualifications of each class specification and need not be specifically set forth therein.

**IMPORTANT NOTICE** As required by the department's rules of conduct, all employees of the Franchise Tax Board (FTB) must be in compliance with the California Revenue and Taxation Code. During the background investigation portion of the hiring process, FTB will review return information to verify California state income tax compliance. Any failure to comply with the California Revenue and Taxation Code may prevent you from being hired at FTB. You must verify your filing status by calling 1-800-852-5711 to resolve any potential tax compliance issues, prior to submitting your application and seeking employment with FTB. All applicants not currently employed with the Franchise Tax Board will be subject to a pre-employment background investigation. The investigation will consist of completion of a pre-employment questionnaire, fingerprinting, and an inquiry to the Department of Justice to disclose criminal records. We comply with the Americans with Disabilities Act. Persons with hearing or speech impairments, call TTY/TDD (800) 735-2929.

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to clearly demonstrate how you meet the Minimum Qualifications and Alternate Range Placement for the position on your State Application (STD Form 678). The application should also clearly demonstrate the candidate’s ability to meet the Desirable Qualifications identified in this job advertisement. The Classification Specification is located on this Job Announcement Posting under "Minimum Requirements”.

• Strong knowledge of cloud security frameworks such as Computer Information Science (CIS) Benchmarks, National Institute of Standards and Technology ( NIST) 800-53, NIST 800-207 Zero Trust)
• Hands-on experience with cloud platforms (e.g., Microsoft Azure, AWS, Google Cloud) and their security services (e.g., Azure Security Center, AWS GuardDuty, GCP Security Command Center)
• Experience in integrating and managing security information and event management (SIEM) tools (e.g., Splunk) in hybrid or cloud-native environments
• Proficiency in cloud-native logging and monitoring tools (e.g., Azure Monitor, AWS CloudWatch, Google Cloud Logging)
• Understanding of Identity and Access Management (IAM), including conditional access and privileged access management in the cloud
• Familiarity with Infrastructure-as-Code (IaC) security scanning tools (e.g., Terraform, Azure Bicep, AWS CloudFormation)
• Experience in real-time security incident monitoring, analysis, and response in a 24/7 SOC environment
• Ability to investigate cloud-based security alerts, determine root cause, and recommend remediation
• Knowledge of Endpoint Detection and Response (EDR) solutions that support cloud-hosted systems
• Experience supporting and enhancing cloud-based Data Loss Prevention (DLP), Cloud Access Security Broker (CASB), and secure web gateways
• Ability to develop playbooks and automated response workflows for cloud-based incidents
• Strong analytical and problem-solving skills; ability to handle complex issues independently
• Excellent written and verbal communication skills to articulate technical security concepts to non-technical stakeholders
• Team collaboration experience across multi-disciplinary units including developers, network engineers, and compliance officers
• Project coordination or leadership experience in cloud security implementations or assessments
• Experience supporting government or regulatory compliance in cloud environments (e.g., IRS 1075, FedRAMP, HIPAA, CJIS)
• Familiarity with Zero Trust principles and application to cloud infrastructure
• Ability to maintain situational awareness and respond to evolving threats targeting cloud ecosystems

Benefits

Benefit information can be found on the CalHR website and the CalPERS website.

In addition, Franchise Tax Board offers the following:

• Convenient transportation and commuting options include : Light Rail stop, bicycle lockers, free parking, and carpool/vanpool opportunities.

Additional Application Instructions

A complete application package must be received in the Classification & Hiring Unit or postmarked by the final filing date and must include:

• Completed employment information on the STD. 678, including the “From” and “To” dates, “Hours Per Week,” and “Duties Performed" fields for all jobs listed in the “Employment History” fields (resumes do not take the place of these fields on the STD. 678)
• All of the required documents listed in the “Required Application Package Documents” section
• The position number and job control number in the job title line of the STD. 678, if submitting a paper application package (these numbers will auto-populate in the job title line of the STD. 678 if submitting an electronic application through your CalCareer Account)
• A signature, if submitting a paper application package

Candidates who do not follow all of the listed application instructions may be eliminated from the selection process. All submitted information will be screened and the most qualified candidates will be invited to an interview.

Electronic applications submitted through your CalCareer Account are highly recommended. If you are unable to apply electronically through your CalCareer account, please mail a completed and signed STD. 678 and application package to the mailing address provided above in the “Application Instructions” section.

Do not include full Social Security Number, method of eligibility, and LEAP information in your application package.

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• Other - A cover letter is required and must be included.