Information Technology Specialist II - Information Security Specialist

Job Description and Duties

The Office of the Secretary of State is recruiting to fill a permanent full-time Information Technology Specialist II position in the Information Technology Division (ITD).

Under the general direction of the Chief, Cybersecurity Branch, the IT Specialist II – Security Analyst, monitors, evaluates, and responds to cyber threats affecting the NAP 2.0 Project system. The Security Analyst analyzes system activity, reviews alerts and audit logs, and provides incident response support as part of the Secretary of State’s security program. This position works closely with Security Engineering and the solution provider to assess and remediate risks, ensuring system compliance with NIST 800-53 and State Administrative Manual (SAM) cybersecurity standards. The Security Analyst plays a key role in threat identification, detection engineering, and reporting.

Desirable Qualifications:

• Multiple years’ experience as a Security Analyst in an enterprise environment

• Experience in real-time security monitoring, triage, and incident response

• Hands-on experience conducting root cause analysis and forensic investigations

• Experience writing and reviewing incident response reports and risk advisories

• Familiarity with change management and security review processes

• Strong analytical, written, and verbal communication skills

• Familiarity with incident playbooks and escalation procedures

• Strong understanding of NIST CSF and 800-53 control implementation

• Familiarity with security event correlation and threat detection techniques

• Demonstrated ability to work independently on complex tasks

Examination Information

Candidates new to state service or those seeking a promotional opportunity must take the online examination to establish eligibility. The examination can be found at the following link CalCareers: Exam Bulletin - Information Technology Specialist II .

There is also a Limited Examination & Appointment Program (LEAP) exam available for this classification. Information on the LEAP certification process is available on the Department of Rehabilitation LEAP Certification website .

You will find additional information about the job in the .

Working Conditions

This job advertisement indicates whether this position is eligible for telework. All employees who telework are required to be California residents, in accordance with Government Code 14200, and may be required to report to the Secretary of State’s Headquarters (Sacramento), when needed, and on short notice. Candidates who reside outside of the state of California may be interviewed; however, the selected candidate must have a primary residency in the state of California prior to appointment (and continue to maintain California residency) as a condition of employment. Failure to meet this requirement may result in the job offer being rescinded

Special Requirements

Supplemental Questionnaire: The response to the Supplemental Questionnaire listed below and should be no more than two (2) pages typed, using business professional font, font size and formatting. Responses do not need to include the question but must be numbered in the same order. Applications that do not follow the directions as identified above, provide incomplete responses, or do not submit a Statement of Qualifications will not be considered. Applicants must answer the following questions:

1. Please describe in detail a time when you participated in the response to a cybersecurity incident or threat affecting an enterprise IT environment. In your response, explain how the incident was detected, what steps you took to analyze the event, and how you determined the scope and severity. Include details about the tools or data sources you used (such as SIEM logs, endpoint alerts, or forensic evidence), how you collaborated with other teams or stakeholders, and how your actions helped mitigate risk or improve the organization’s overall security posture. Be sure to highlight how your work contributed to lessons learned, policy improvements, or the refinement of future detection and response processes.

Benefits

Benefit information can be found on the CalHR website and the CalPERS website.

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is optional. It may be included, but is not required.
• Supplemental Application - Please Submit your response to the supplemental question as indicated in the Special Requirements section above.