The San Bernardino Superior Court, County of San Bernardino, seeks a Cybersecurity Analyst. Are you passionate about safeguarding digital infrastructures from cyber threats? Join our dynamic team as a cybersecurity analyst, where you will tackle cutting-edge challenges and protect our organization's invaluable assets against evolving cyber threats.

About the Position

Under general supervision, leads and participates in the work of other employees engaged in administering, integrating, monitoring, tuning and upgrading assigned server platforms and operating systems for optimal performance, ensuring the integration of network, platform and application structures. An Infrastructure Analyst III analyzes and identifies enterprise technology solutions to meet court-wide business requirements; assesses network systems, hardware, and/or software for security vulnerabilities; participates in or leading the implementation of risk remediation efforts; assesses the output of tests and scans to develop corrective action plans; leads incident response functions; recommends cybersecurity policies and procedures to senior leadership; develops implementation strategies and coordinates with vendors and users; leads technology- related project teams; and performs related duties as assigned.

Distinguishing Characteristics:
Infrastructure Analyst III is the advanced professional skill level and working lead class in the Infrastructure Analyst series. Incumbents independently perform advanced, complex network system cybersecurity, administration functions, including researching, analyzing, planning, coordinating and implementing new releases, upgrades or changes to network, operating, or database systems to ensure reliable operations, connectivity, security and functionality.

In addition to performing the full range of journey-level skilled duties, incumbents serve as the working lead person of technology professionals and technicians and perform the more complex duties in project management, plus oversee the work and provide training and guidance to employees. Employees in this class typically report to an Information Technology Director, Manager or Supervisor and provide lead work direction and guidance to Infrastructure Analysts and Systems Technicians assigned to infrastructure or applications.

Incumbents work with limited supervision and exercise independent judgment to ensure employees complete assigned tasks and responsibilities within a broad framework of established policies, procedures and objectives.

Infrastructure Analyst III is distinguished from Information Technology Supervisor in that incumbents in the former class are not full supervisors.

1. Leads, provides work guidance and direction, and participates in the work of unit members; participates in scheduling, assigning and monitoring work of other employees for completeness, accuracy and conformance with Court/departmental standards; provides information, instruction and training on work processes, proper uses of equipment and safe work practices; provides input to supervisor on employee work performance and behaviors; estimates personnel, equipment and material requirements for assigned jobs; may order work materials and supplies; assists in ensuring a fair and open work environment in accordance with the Court's commitment to teamwork, mutual trust and respect.
2. Leads installations of security measures and operating software to protect systems and information infrastructure.
3. Monitors computer networks for security issues and suspicious activities.
4. Reports and investigates security breached and cybersecurity incidents.
5. Educates staff and recommends security measures, including protocols, policies and procedures to senior leadership.
6. Interprets and analyzes test results to create and implement corrective measures.
7. Monitoring and threat detection, utilizing a variety of security tools, techniques, and log analysis.
8. Vulnerability and patch management.
9. Administrating of cybersecurity awareness training and phishing campaigns.
10. Incident response and investigation; leading response and investigation efforts and working closely with other IT teams, vendors, and statewide partners to analyze and remediate the issue.
11. Policy development and implementation.
12. Risk management, governance and compliance.
13. Performs complex systems administration functions for multiple enterprise server platforms and operating systems; installs, configures and maintains servers and operating system software, hardware and devices; installs, configures, tests and implements system monitoring and management software tools; installs and tests operating system patches, releases, upgrades and fixes; develops and maintains scripts to automate complex system maintenance tasks, service packs and patches.
14. Serves as a lead cybersecurity administrator for the Court's infrastructure, with responsibility for assigned major systems; participates in the evaluation and recommendation of new releases, upgrades and changes to the overall network infrastructure; identifies, develops, submits and implements project plans to improve network reliability, security and efficiency; participates in and makes recommendations regarding new systems, vendor services and contracting; participates in conducting network capacity analysis and long-term planning.
15. Participates in the development of statements of work for RFPs; participates in evaluating vendor solutions; coordinates Court review of vendor deliverables for accuracy and completeness, ensuring that Court needs and requirements have been met.
16. Establishes and maintains testing environments to ensure new releases and enhancements are ready for production; with Information Technology Leadership , ensures effective integration, operation and concurrent connectivity of multiple platforms and networks; serves as project leader or team member on multi-platform/network systems installations; participates in the development and implementation of network standards and procedures.
17. Serves as a central point of coordination with departments on significant application/hardware problems and change request issues that require assignment of resources that extend beyond Help Desk response standards; represents the department on committees and teams for major Court-wide projects and prepares analysis, reports and recommendations on such projects.
18. Prepares a variety of work reports and records; attends meetings; gathers, reviews and analyzes operational data and performance reports to ensure Court and department goals, objectives and standards are being met; represents the department in meetings with other departments.
19. May provide leadership/direction to other Information Technology staff beyond the infrastructure section.
20. Performs other duties as assigned.

Graduation from an accredited four-year college or university with a major in management information systems, cybersecurity, computer science or a closely related field, and at least five (5) years of progressively responsible experience in systems, cybersecurity or network administration; or an equivalent combination of education, training and experience. Experience in a state court system is preferred.

Certification as CISSP, CCSP, CCISA, CRISC, CEH, CCNA or a related certification is highly desirable.

Knowledge of:

• Operating system architectures, characteristics, components and commands applicable to enterprise information systems and multiple platform operating systems in both physical and virtual environments;
• Information security and risk assessment;
• Information Technology compliance;
• Supporting users remotely and onsite at multiple sites, in an enterprise environment;
• Experience in applying cybersecurity fundamentals;
• Network architectures and theory and principles of network design and integration, including topologies and protocols;
• Principles, practices and methods of systems administration and maintenance, including configuration, performance tuning and diagnostic tools;
• Methods and techniques for performing connectivity testing and troubleshooting, including the uses of diagnostic tools and equipment;
• Internet/intranet technologies and design concepts and techniques, including router and firewall configuration;
• Principles and practices of disaster recovery and incident response;
• Enterprise-level security management, installation and configuration of antivirus software;
• Database management systems and software, including architectures, diagnostic tools, commands and utilities;
• Tools and utilities used in monitoring and tuning systems, database and application performance;
• Systems integration design concepts and practices;
• Enterprise-level LAN and WLAN operation;
• Project management tools and techniques;
• Court policies, procedures and practices regarding computer hardware, software and data security;
• Safety policies, practices, equipment and supplies applicable to the work;
• Applicable federal and state laws, rules and regulations;
• Basic principles and practices of employee supervision;
• Sound business communications;
• Court Personnel Plan policies and labor contract provisions.

1. Applications will be reviewed to identify candidates with minimum qualifications and/or desirables. Only those who meet the minimum qualifications and desirables (if applicable) will proceed to the next step in the recruitment process.
2. Candidates' supplemental question responses may be evaluated and ranked. Depending on the number of applications, assessments and/or screening interviews may be conducted.
3. Candidates who are successful in step 2 will be placed on the eligible list and may be considered for interview. Placement on the eligible list does not guarantee an interview or employment.

The physical and mental demands described in theare representative of those that employees must meet to perform the essential functions of this class successfully. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

The Superior Court of California, County of San Bernardino is an Equal Opportunity Employer- M/F/D/V.