IT Security Analyst III

ABOUT THE POSITION

The Riverside County District Attorney' s Office is seeking an experienced Information Security Analyst III (ISA III) in Riverside. The ISA III will serve as a senior-level security professional focused primarily on security monitoring, governance, and incident response with some emphasis on programming or tool development. This role supports the DA's Office security posture by implementing and maintaining security policies and standards, overseeing security compliance, and participating in enterprise risk and governance efforts. The analyst will conduct advanced monitoring of intrusion detection systems, firewall logs, and system activity to identify threats and coordinate mitigation responses.

The incumbent will also play a critical role in emergency preparedness and operational resilience by developing and maintaining Emergency Operations Plans, supporting disaster recovery and business continuity activities, and maintaining inventory tracking methodologies for critical assets. This role participates in the security incident response team, evaluates security events, and provides recommendations to management.

Additional responsibilities include performing vulnerability assessments and penetration testing, conducting forensic investigations while preserving evidence integrity, and collaborating with internal departments to ensure secure system designs and adherence to enterprise security architecture. This position requires strong analytical ability, sound judgment, and expertise in monitoring, governance, and investigative practices rather than programming or systems development.

Experience with Security Information and Event Management (SIEM) systems is highly desired. Candidates should have hands-on experience working with SIEM platforms, including tuning alerts, reviewing correlation logic, and triaging SIEM-generated events. Knowledge of log ingestion best practices is also preferred, though only minimal scripting is needed for this role.

Meet the Team!The District Attorney of Riverside County, as the public prosecutor acting on behalf of the People, vigorously enforces the law, pursues the truth, protects those victimized by crime, exonerates the innocent, and safeguards the rights of all to ensure that justice is done on behalf of our community.  The office’s staff of over 700 is comprised of prosecuting attorneys, sworn investigators, victim-witness advocates, paralegals, investigative technicians, forensic analysts, and a wide range of information technology and supporting staff all committed to excellence and integrity in public service.  We are, and we seek to maintain, a diverse workforce to match a diverse county.

EXAMPLES OF ESSENTIAL DUTIES

• Implement and maintain global security policies, standards, guidelines, and procedures to ensure ongoing security compliance; recommend security improvements; ensure that technology decisions made are compliant with Enterprise Security Architecture.

• Develop, analyze and maintain Emergency Operations Plans; research, develop, document and implement tracking and inventory methodologies for maintaining inventory of critical assets.

• Perform vulnerability scans and penetration tests; develop and maintain scripts, routines, and software to perform vulnerability threat assessments; coordinate County disaster recovery and business continuity tasks.

• Participate as a member of the security incident response team; evaluate security incidents, developing solutions and communicating results to management.

• Manage a computer crime or incident scene, including recognition of the proper investigative approach, conducting a field of search to establish probable cause for seizure, proper collection methods, evidence preservation, transportation, computer forensic analysis, and case management; use various security tools and prepare reports on findings.

• Monitor and review intrusion detection systems and firewall logs, analyzing events and patterns and coordinating mitigation responses; review firewall and router rules and access control lists; research technical and security topics and maintain information on industry trends; review and analyze system logs and access lists.

• Perform design review and analysis; perform threat and risk analysis; develop and evaluate plans, principles, and procedures for accomplishing customer security studies and provide professional analysis of methods and objectives.

• Develop and analyze information security models, maintaining methodology to track Security Plans for each sensitive and critical application and general support system within the organizations.

• Respond to and assist in information security assessment requests; evaluate vendor products and services; advise management of risks and best security practices.

• Coordinate implementation and modification of enterprise and departmental DMZ's; perform design review and analysis; collaborate on security solutions with departments.

SUPPLEMENTAL INFORMATION

This position is in office in Riverside.

General Information
If you have any questions regarding this posting, please contact Angie Tavaglione at  or. Please allow 1-2 business days for a response to general inquiries.

Qualifications

MINIMUM QUALIFICATIONS:

• Education: Successful completion of the education required to possess and maintain current certification within guidelines established by the International Information Systems Security Certification Consortium, Inc. or (ISC)² as a Certified Information Systems Security Professional (CISSP)
• Experience: Five years of progressively responsible experience in information security, including extensive experience and knowledge of Linux and Microsoft operating systems
• This experience must include performing vulnerability scans and penetration tests
• developing or maintaining scripts, routines, or tools used for vulnerability and threat assessments
• coordinating disaster recovery and business continuity activities
• conducting security design reviews and analyses
• performing threat and risk assessments
• and developing or evaluating plans, principles, and procedures to support security studies and provide professional analysis of methods and objectives.. Military or law enforcement experience is desired
• Knowledge of: Standard security practices
• network architecture, routing, and TCP/IP protocols
• Linux and Microsoft operating systems
• project planning and management
• use of third-party applications and native scripts and languages
• risk assessment process and practices
• general business processes and standards associated with areas of assignment
• Ability to: Perform cyber-attack trend analysis
• project planning and management
• conduct independent systems analysis of complex business processes
• manage evidentiary process
• maintain the chain-of-custody process and procedures
• conduct investigations and coordinate security anomalies and events
• interact with customers and vendors on the phone and in person
• perform business continuity planning, documentation and evaluation
• establish and maintain excellent customer service and relationships
• Other Requirements Background: A successful Security Clearance conducted by the DA is required for positions within the Riverside County Office of the District Attorney
• License/Certificate: Must possess and maintain current certification within guidelines established by the International Information Systems Security Certification Consortium, Inc., or (ISC)² as a Certified Information Systems Security Professional (CISSP) by (ISC)². Possession of a valid California Driver's License may be required

Work for Warriors is a no-cost employment program of the California Military Department for Service Members, Veterans, and military family members. The Veteran Staffing Consultant for County of Riverside is Martin Rivera.