** This role is onsite in Sacramento, CA and does not offer relocation**

Job Summary: We are seeking an experienced Information Systems Security to support a public sector client. The ideal candidate will have a strong background in information security, technical expertise, and excellent communication skills. You will play a critical role in safeguarding our organization’s assets and ensuring compliance with security standards.

Responsibilities:

Risk Assessment and Mitigation:

• Evaluate and review new and upgraded technologies for security risks.
• Perform risk and security assessments for proposed applications.
• Assist in risk and vulnerability mitigations.

Documentation and Planning:

• Develop, update, and review System Security Plans (SSPs).
• Create and maintain Incident Response Plans (IRPs) for business and control systems.
• Conduct tabletop exercises and simulations.

1. Incident Response:

• Coordinate incident response following the Incident Command Structure (ICS) when appropriate.
• Monitor district assets (servers, computers, devices, networks, applications) for potential security threats and vulnerabilities.

Technical Security Systems:

• Work with SIEM, firewalls, endpoint security, vulnerability management, patch management, PKI, and cloud security management.
• Deploy security awareness and training platforms, including phishing simulations.
• Present at security workshops (technical and nontechnical).

Audits and Assessments:

• Perform security audits, testing, and assessments.
• Track identified vulnerabilities and recommend mitigation or risk acceptance based on criticality.
• Evaluate risk acceptance requests and propose mitigating controls if needed.

Automation and Scripting:

• Develop and test scripts to automate security operations tasks.
• Configure policies for enterprise security platforms using administrative tools.

Compliance and Cloud Security:

• Work with CIS Benchmarks/CIS-CAT to identify standards and address non-compliance.
• Have experience in cloud security with major cloud platform providers.

Technical Proficiency:

• Proficient in networking, Windows domain administration, PAM, DLP, MFA, SOC applications, and SIEM applications.
• Strong programming skills in Python and PowerShell.

Collaboration and Independence:

• Collaborate effectively with team members.
• Work independently with minimal supervision.

Procedural Writing and Broad Knowledge:

• Write procedures for full-time control systems, OT, and IT management.
• Possess a broad range of knowledge, including networking experience and security architecture.

Day-to-Day Variability:

• Attend meetings, launch security training, review phishing tests, and participate in project meetings.
• Conduct assessments of the company, manage scorecard assessments, and ensure security across the company.
• Check cloud services, manage support calls, and respond to inquiries.

Industrial Control Systems:

• Respond to incidents involving industrial control systems, such as water waste water control systems.
• Provide security awareness training and demonstrations, potentially as a whitehat hacker.

Networking and Security Architecture:

• Assess network security architecture, ensure firewalls are configured correctly, and adhere to CIS controls framework.
• Manage security assessments and incident response, including pcap analysis and log management.

Qualifications:

• Bachelor’s degree in computer science or related field.
• Minimum of eight years of experience in information security across various domains.
• Knowledge of control systems, security best practices, security frameworks, and security controls.
• Experience with Public sector security. Preferably within wastewater or utilities

Compensation:

$55.00/hr to $65.00/hr.

Exact compensation may vary based on several factors, including skills, experience, and education.

Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.

** This role is onsite in Sacramento, CA and does not offer relocation**