Senior Cybersecurity Analyst; Senior Information Technologist

Salary may be negotiable within the applicable range of the classification and successful candidate's qualifications, subject to appropriate authorization.

The Orange County Information Technology (OCIT) – Enterprise Cybersecurity Operations Team is seeking an experienced supervisor to oversee and assist a team of cybersecurity analysts in continuous monitoring of the County's enterprise environmental assets, analyzing threats, mitigating vulnerabilities, detecting compromises, and conducting incident response. The Senior Cybersecurity Analyst will be responsible for designing, configuring, implementing, and supporting County Enterprise tools. This position requires strong analytical and communication skills.

• Oversee daily operations of the security operations center (SOC).
• Ensure service ability and integrity of SOC equipment and tools.
• Support SOC efforts in digital forensics and eDiscovery.
• Serve as subject matter expert on system security tools, including SIEM, SOAR, EDR, IAM, PAM, IPS/IDS, Web Proxy Firewall, DLP, Email Security, and WAF, and provide technical leadership on toolset enhancements.
• Lead and perform threat hunting activities such as analysis of threat intelligence, detection and evaluation of IOCs, and incident escalation.
• Evaluate vendor solutions, make recommendations, and lead projects for deployment and/or enhancement of security systems.
• Participate in incident response team and execute the County Incident Response Plan and cyber incident playbooks.
• Review cybersecurity requests against normal operational security processes and provide approval or escalation.

In addition to minimum qualifications, the ideal candidate should have an associate's or higher in Information Computer Sciences, Information Computer Technology, Information Systems, or related field with at least three years of security‑related work experience in a cybersecurity, enterprise IT, or multidisciplinary IT environment.

A certification in one of the following is preferred but not required:

• CompTIA Security+
• CompTIA CySA+
• ISC² CISSP
  - Certified Information Systems Security Professional
• ISC² CISM - Certified Information Security Manager
• GCIL- GIAC Certified Incident Leader
• GEIR - GIAC Enterprise Incident Response
• GSOM- GIAC Security Operations Manager
• GSOC- GIAC Security Operations Certified

• Understanding of NIST 800-53 framework and application of its controls in operational security.
• Understanding of network protocols, routing and switching, LAN/WAN, remote access, and encryption protocols.
• Understanding and application of network security concepts and troubleshooting enterprise firewalls, IDS/IPS, DNS Security, and WAF.
• Foundational knowledge of Microsoft Office
  365, Azure Cloud, and related security concepts.
• Utilizing security tools such as SIEM, SOAR, EDR, DLP, and Web Filter/Proxy.
• Proficiency in scripting languages and Power Shell.
• Installing, configuring, and supporting all varieties of Microsoft Windows services and platforms.
• Implementing enterprise security best practices including encryption, implicit and explicit permissions, multi‑factor authentication, auditing and digital forensics, and data retention.

• Serve as department liaison for operational security matters, requests, and issues.
• Collaborate and establish rapport with staff, managers, and people across County departments.
• Lead and train cybersecurity analysts on best practices.
• Build and maintain a positive, forward‑focused customer‑oriented work environment.

• Respond quickly, courteously, and professionally to customer service requests.
• Solicit feedback and adjust customer service requests to align with business improvement.
• Clearly convey IT concepts and terminology to both technical and non‑technical staff at all levels.
• Prepare and maintain technical documentation of department processes and procedures.

Requirements are described in the official job classification; see the Minimum Qualifications section of the official posting for full details.

Orange County, as an equal employment opportunity employer, encourages applicants from diverse backgrounds to apply.