Information Technology Security Engineer I - Transfer

In addition to applying for open and Countywide promotional recruitments, current permanent employees who are interested in other career opportunities within Madera County can submit a transfer application. All requests for a transfer are kept confidential and will be kept for a period of six (6) months.

Under general supervision performs a variety of professional duties in support of Countywide information security related operations and activities; participates in the design, implementation, and maintenance of security measures to protect the County’s data and infrastructure from unauthorized access, cyber threats, and other potential risks; collaborates with Information Technology staff to identify vulnerabilities, recommend security policies and procedures, and provide guidance on best practices; and performs related duties as assigned.

Supervision Received and Exercised
Receives general supervision from assigned supervisory or management personnel. Exercises no direct supervision of staff.

Examples of Duties

The job functions listed below are not inclusive or exclusive and are intended only as illustrations or examples of the various types of work that may be performed in various divisions/departments. Types of work performed shall be within the scope and licensure (if required) for the classification. Reasonable accommodation will be made when requested and determined by the County to be appropriate under applicable law.
Some duties, knowledge and abilities may be performed in a learning capacity by positions at the entry (I) level.

• Develops and deploys advanced security solutions, including, but not limited to firewalls, intrusion detection/prevention systems, encryption technologies, and specialized and specific information security tools, to safeguard county systems and data.
• Oversees the operation of security tools, conducts regular security assessments, and analyzes logs and alerts to identify and address potential vulnerabilities or incidents.
• Performs periodic vulnerability assessments and participates in penetration testing to identify weaknesses in systems and applications, recommends remediation actions, and implements upon approval.
• Leads incident response efforts, investigating and mitigating security breaches, coordinating with internal teams, and documenting incident details.
• Works closely with IT personnel to integrate security measures into the entire IT infrastructure, providing guidance on security architecture and risk mitigation.
• Develops and conducts security awareness training programs to educate staff about security risks, best practices, and proper handling of sensitive data.
• Participates in security audits and assessments, ensuring compliance with applicable regulations, laws, and industry standards.
• Participates in the timely deployment of security patches, updates, and resolutions to system legacy and/or configurations flaws across systems to address vulnerabilities and maintain system integrity based on risk priority.
• Creates comprehensive technical documentation, including security guidelines, user guides, tip sheets, incident reports, and vulnerability assessment reports.
• Participates in IT projects providing cybersecurity expertise, contributing to project planning, and striving towards successful implementation.
• Stays abreast of industry trends, emerging technologies, and best practices, proposing innovative solutions for business enhancement.
• Enforces information technology operational policies and procedures.
• Attends and participates in staff meetings and other meetings as requested.
• Performs related duties as assigned.

Employment Standards / Minimum Qualifications

Knowledge of:

• Security concepts, including threat modeling, risk assessment, security controls, and security architecture design; security tools and platforms for monitoring, intrusion detection, audit log evaluation, and vulnerability assessment.
• Network security protocols, technologies, and best practices, including but not limited to firewalls, intrusion detection/prevention systems, VPNs, and network segmentation.
• Security considerations and best practices for cloud computing environments, including securing cloud-based applications, data, and services.
• Security compliance frameworks and industry standards.
• Threat intelligence sources and cyber-attack trends.
• Incident response methodologies and best practices.
• Data security and disaster recovery systems and procedures.
• Principles and practices of developing and maintaining technical documentation, files, and records.
• Network design and Cisco networking.
• Applicable federal, state, and local laws, codes, and ordinances relevant to the area of responsibility.
• Techniques for providing a high level of customer service by effectively dealing with the public, vendors, contractors, and County staff.
• The structure and content of the English language to effectively perform the work.
• Modern equipment and communication tools used for business functions and program, project, and task coordination, including computers and software programs relevant to work performed.

Ability to:

• Identify and deploy controls and resolutions to system vulnerabilities emerging from legacy system configurations and/or configuration oversight.
• Configure enterprise network equipment including but not limited to firewalls, routers, servers, and other networking equipment.
• Design, implement, and support security technology tools to improve the overall cybersecurity posture of the County.
• Approach security holistically, considering the entire technology ecosystem and its interdependencies, and making informed decisions that align with overall security objectives.
• Perform post-incident analysis, identifying root causes, and recommending process improvements to prevent similar incidents in the future.
• Promote a culture of security awareness and educating staff at all levels about the importance of cybersecurity best practices.
• Think critically and solve complex computer/network/security issues and problems.
• Make risk-based decisions by evaluating the potential impact of security vulnerabilities and incidents on the County systems.
• Seek out signs of potential security threats by analyzing logs, traffic patterns, and other indicators to proactively identify and address risks.
• Maintain accurate files and records.
• Prepare clear and concise reports, correspondence, and other written materials.
• Use tact, initiative, prudence, and independent judgment within general policy and procedural guidelines.
• Respond to and effectively prioritize a high volume of phone calls and other requests for service.
• Understand, interpret, and apply all pertinent laws, codes, regulations, policies and procedures, and standards relevant to work performed.
• Independently organize work, set priorities, meet critical deadlines, and follow-up on assignments.
• Effectively use computer systems, software applications relevant to work performed, and modern business equipment to perform a variety of work tasks.
• Communicate clearly and concisely, both orally and in writing, using appropriate English grammar and syntax.
• Establish, maintain, and foster positive and effective working relationships with those contacted in the course of work.

Education and Experience
Any combination of training and experience that would provide the required knowledge, skills, and abilities is qualifying. A typical way to obtain the required qualifications would be:

• Equivalent to a bachelor’s from an accredited college or university, or equivalent technical certification, with major coursework in computer science, information technology, or a related field.
• Two (2) years of information technology networking, desktop, or security experience in a professional, analytical capacity.

Licenses and Experiences

• Some positions may require possession of, or ability to obtain, nationally recognized industry specific technical certification pertinent to the assigned area(s) of responsibility.
• Possession of, or ability to obtain by the time of appointment, an appropriate California driver’s license.

Physical Demands
Must possess mobility to work in a standard office setting and use standard office equipment, including a computer, and to operate a motor vehicle to visit various County and meeting sites; vision to read printed materials and a computer screen; and hearing and speech to communicate in person and over the telephone. Standing in and walking between work areas is frequently required. Finger dexterity is needed to access, enter, and retrieve data using a computer keyboard or calculator and to operate standard office equipment. Positions in this classification frequently bend, stoop, kneel, and reach to perform assigned duties, as well as push and pull drawers open and closed to retrieve and file information. Employees must possess the ability to lift, carry, push, and pull materials and objects up to 10 pounds.

Environmental Conditions
Employees work in an office environment with moderate noise levels, controlled temperature conditions, and no direct exposure to hazardous physical substances. Employees may interact with upset staff and/or public and private representatives in interpreting and enforcing departmental policies and procedures.

Working Conditions
May require working overtime, on-call, and weekends, and/or occasional shift work.

Application Process

Permanent employees may apply for a transfer for the same classification which they currently hold, or a comparable classification in accordance with County Ordinance 2.57.090, Rule 6-14.

The transfer shall be at the request of the employee, recommended by the appointing authorities concerned, and approved by the director. Permanent employees who transfer shall retain their permanent status.

Transfer requirements: In order to apply to be eligible for a transfer to a comparable classification, the following factors will be considered in reviewing the request: 1) duties, 2) minimum qualifications, and 3) examination content. Outside employment experience will not be used to qualify for transfer requests. 

Employees currently in probationary status are not eligible to apply for transfers.

Your application should contain the most up to date and accurate information regarding your work history within the County. Resumes may be submitted in addition to your application, however, a notation of "See Resume" will not be accepted in place of completing the work experience section of the application or responding to the Supplemental Questions.

Employees meeting the transfer requirements for the position will be eligible for a transfer for a period of six (6) months and will be certified to the department with the vacancy for interview.
 
Individuals will no longer be eligible for a transfer if one of the following occurs:

• The employee is hired as a transfer.
• The employee requests their name to be removed prior to the end of the six (6) month period.
• The employee accepts a transfer to a lower classification (voluntary demotion).

Benefits

Benefits of employment with the County of Madera include:
 

• 14 paid holidays per year;
• 1 sick leave day per month (unlimited accrual);
• 2 weeks paid vacation after 1 year, vacation accrual increasing thereafter with years of service (45 days maximum accrual);
• Membership in the California Public Employees' Retirement System (CalPERS), with an enhanced 2.7% @ 55 retirement benefit formula (based on the highest 12 months with the employee paying 8% toward the retirement cost) for those individuals with current or prior qualifying public sector service that establishes eligibility as a "classic member" pursuant to the provisions of California's 2013 Pension Reform Act (Act) and CalPERS Regulations. Individuals with no current or prior qualifying public sector service, and who are defined as new members or new employees under the Act, will be eligible for the 2% @ 62 retirement benefit formula (based on the average compensation over 36 consecutive months with the employee paying 7.75% toward the retirement cost);
• County participates in the Public Employees' Retirement System Health Benefit Program and for certain selected health plans, the County pays 95% of health insurance premium for employee and 50% for either two-party or dependent coverage;
• Additional salary increases after 10, 15, and 20 years of service.

Supplemental Questions

01

Please indicate below the level of education you possess from an accredited college or university, or equivalent technical certification, with major coursework in computer science, information technology, or a related field.

• High School Diploma or GED equivalent.
• Associate’s degree.
• Bachelor's degree or higher.

02

How many years of increasingly responsible experience do you possess in information technology networking, desktop, or security experience in a professional, analytical capacity?

• Less than two (2) years of experience
• Two (2) to less than four (4) years of experience
• Four (4) to less than six (6) years of experience
• Six (6) or more years of experinece

03

I understand that I must indicate the specific time period and distinct job title in the application's work experience section. I understand that I am required to describe, in detail, my qualifying experience on my application.

• Yes, I understand.

04

Transfer recruitments require that you possess permanent status in your current position as an employee of Madera County. Do you have permanent status in your current position as an employee of Madera County?

• Yes
• No

Required Question

Agency Information

Employer

County of Madera

Address

200 W. 4th Street








Madera, California, 93637

Phone

559.675.7705

Website

http://www.maderacounty.com