Information Security Analyst I

Job Description

The Job

The Innovation and Technology Department is seeking motivated professionals who are interested in beginning and developing a career in cybersecurity for the position of Information Security Analyst I (ISA I). As an entry-level member of the Countywide Information Security Program that provides protection, governance, risk, and compliance, the ISA I will assist with monitoring, analyzing, investigating, and responding to cybersecurity events and incidents that may affect County systems, applications, networks, and information assets. The analyst will work collaboratively with experienced cybersecurity team members, County departments with diverse business and regulatory requirements, and various technology teams to identify potential threats, evaluate security concerns and issues, and support efficient and effective response including identifying appropriate mitigation and remediation activities.

The position will also assist in addressing enterprise and departmental cybersecurity and or information security needs, including security monitoring, incident response, vulnerability and threat intelligence analysis, security assessments, and operational security support. Through hands-on experience, training, and mentorship, the ISA I will develop the analytical, technical, and critical thinking skills necessary to help protect County information systems and assets to continuously strengthen the County's overall cybersecurity and information security posture.
Key responsibilities may include:

• Assist in monitoring computer networks for security issues and suspicious activities.
• Assist in incident response and investigate cybersecurity incidents.
• Assist in response efforts in collaboration with other IT teams, vendors, and cyber security intelligence partners to analyze and mitigate and/or remediate the issue.
• Educates team members; and recommends security measures including protocols, policies, and standard practices to leadership.
• Assist in conducting vulnerability assessments with a proactive focus on threat intelligence and the mitigation and prevention of cyberattacks.
• Collaborate with colleagues for network security design enhancements.
• Assist in coordinating and facilitating the Countywide Security Awareness Training Program.
• Assist in coordinating and facilitating the Countywide Phishing Simulation Program.
• Assist in conducting, coordinating, and facilitating cybersecurity or information security tabletop exercises.
• Assist in reviews and coordinating of contracts, procurement documents, and software or service licensing agreements to identify and assess cybersecurity, privacy, and compliance risks, and provide recommendations to ensure adherence to organizational security policies and regulatory requirements
• Participate in on-call rotation and after-hours maintenance as needed.

For detailed information, refer to Information Security Analyst I .

EXCELLENT BENEFITS

To review job-specific benefits, refer to: Summary of Benefits and the Memoranda of Understanding (MOU)

CONDITIONS OF EMPLOYMENT

Pre-Employment Process: Applicants must successfully pass a background check and a job-related physical exam, including a drug test, prior to employment.

Availability: Incumbents may occasionally work evening and weekend hours. Some overtime, on-call, or call back work may be required.

Sponsorship: San Bernardino County is not able to consider candidates who will required work visa sponsorship at the time of application or in the future.

Minimum Requirements

Candidates must meet the Experience AND Education requirement in order to qualify.

REQUIRED EXPERIENCE:

One (1) year of experience performing technical, analytical, or operational duties related to information technology, cybersecurity, information security, networking, systems administration, technical support, or a closely related field.

Qualifying experience should include exposure to one or more of the following: security monitoring, incident response, vulnerability management, identity and access management, network or endpoint security, system administration, security assessments, or investigation of technology-related issues.

REQUIRED EDUCATION:

Sixty (60) semester or ninety (90) quarter units of completed coursework from an accredited** college or university in information security, information systems, programming, computer science, software engineering, or a closely related field.

SUBSTITUTIONS:

• One (1) additional year of qualifying work experience may substitute for the education requirement.
• A completed Bachelor's degree from an accredited** college or university in information security, information systems, information technology, artificial intelligence, programming, computer science, software engineering, or a closely related field may substitute one (1) year of the required experience.

**Qualifying degrees and coursework must be conferred by institutions accredited by an accrediting body recognized by the U.S. Department of Education. Degrees earned outside the United States must be accompanied by an evaluation from a recognized credential evaluation service verifying U.S. equivalency.

Desired Qualifications

The ideal candidate will possess:

• Bachelor's degree in information systems, information security, information technology, artificial intelligence, computer science, or a closely related field.
• Information security experience in higher education, state, or local government.
• Information security related training or certifications such as CEH, CSA, or CISSP.
• Experience performing information security audits, security assessments, or risk assessments.
• Ability to administer network and host-based tools for penetration testing and ethical hacking products and tools.
• Knowledge of host compromise, various techniques for malware injection, and MITRE Kill Chain Framework.
• Proficiency in performing risk, business impact analysis, vulnerability assessments, while formulating corrective action plans and/or treatment strategies and/or mitigation strategies.
• Strong analytical skills to analyze security requirements and relate them to appropriate security controls.
• Experience with cloud infrastructure and provisioning technology.

Selection Process

Examination Procedure:

There will be a competitive evaluation of qualifications based on the information provided in the Application and the Supplemental Questionnaire. You are encouraged to include detailed descriptions of your qualifying experience and skills, as only the most highly qualified applicants will be referred to the Department.

Application Procedure :

Please complete and submit the online employment application and supplemental questionnaire for consideration before 5:00 PM PT, FRIDAY, OCTOBER 2, 2026 . Resumes will not be accepted in lieu of the application and/or supplemental questionnaires.

To ensure timely and successful submission of your online application, please allow ample time to complete and submit your application before the filing deadline. Applicants will be automatically logged-out if they have not submitted the application and all required materials prior to the posted deadline. Once your application has been successfully submitted you will receive an onscreen confirmation and an email. We recommend that you save and/or print these for your records. Please note: if you do not receive an onscreen confirmation and an email acknowledging our receipt of your application, we have not received your application.

If you need technical assistance, follow this link to review the Government Jobs online application guide or contact their Toll-Free Applicant Support line at (855) 524-5627. Please note that Human Resources is not responsible for any issues or delays caused by your internet connection, computer, or browser when submitting an application.

Equal Employment Opportunity (EEO) / Americans with Disabilities Act (ADA):

San Bernardino County is an Equal Employment Opportunity (EEO) and Americans with Disabilities Act (ADA) compliant employer, dedicated to ensuring equal employment opportunities for all employees and applicants.

ADA Accommodation:

If you have a disability and need accommodations during the testing process, please submit the Special Testing Accommodations Request Form (Download PDF) within one week of the recruitment filing deadline.

Veterans' Preference:

Eligible veterans, their spouses, or widows/widowers who are not current County employees may receive additional Veterans' Preference points. For details and instructions on how to request these points, please refer to the Veterans' Preference Policy .

For more important details, review the Applicant Information and County Employment Process .

Administrative Services Unit

San Bernardino County offers a range of benefit programs for employees and their eligible dependents. These include health, dental, vision, and life insurance, as well as a variety of other voluntary benefits. Programs and benefit amounts vary and are based on bargaining unit, family size, hire date, plan selection, and number of hours worked.

Please review the appropriate Summary of Benefits * for more information

Refer to the appropriate MOU, contact the County’s Employee Benefits and Services Division at (909) 387-5787 or visit the Employee Benefits website for more detailed information.

*Retirement benefits subject to change.

Closing Date/Time: 10/2/2026 5:00 PM Pacific