INFORMATION TECHNOLOGY SECURITY ANALYST (Industrial Control Systems)

Position/Program Information

EXAM NUMBER

C2602A

TYPE OF RECRUITMENT

Open Competitive Job Opportunity

With more than 10 million residents, Los Angeles County has the largest population of any county in the nation. As the largest employer in Southern California, with more than 37 diverse departments and over 2,300 different job descriptions, the County offers a lifetime of opportunities and careers.

Be a part of something great!

We are Los Angeles County Public Works, the largest municipal Public Works agency in the nation. With more than 4,000 employees, Public Works offers over 500 different types of career opportunities that promote professional and personal growth as well as a rewarding and exciting work environment.

Don't miss an opportunity to join our team!

APPLICATION FILING PERIOD:
We will begin accepting applications on Wednesday, May 29, 2024 at 8:00 a.m. Pacific Time (PT) ) - until the needs of the service are met and is subject to closure without prior notice.

EXAM NUMBER:
C-2602-A

Essential Job Functions

An Information Technology Security Analyst is responsible for performing a combination of the following essential job functions:

• Secures industrial control systems (e.g., Supervisory Control and Data Acquisition (SCADA) Security, Infrastructure, Threat Intelligence) by evaluating technical controls; developing and implementing mitigation strategies/best practices and monitoring threats in order to protect the department’s mission critical systems.
  
• Conducts audits of departmental information technology systems by leading inspections (e.g., field sites and offices), identifying potential information technology risks and vulnerabilities and by recommending remedial measures where appropriate in order to ensure the department is in compliance with all applicable County policies and standards, State and Federal laws, rules and regulations.
  
• Collaborates with the various individuals (e.g., technical teams, project managers, business users, management, vendors, business partners) by advising on the latest security policies and standards; developing remediation strategies and sharing best practices in order ensure the integrity and security of the department’s information technology infrastructure.
  
• Assesses department’s network security (e.g., firewalls, security logs, authentication servers, proxy servers) and control techniques by monitoring intrusion detection systems, firewall logs, access control lists; by investigating security incidents, reviewing security configurations periodically and by leading mitigation response with appropriate stakeholders in order ensure the integrity and security of the department’s information technology infrastructure.
  
• Conducts review of software related to information technology system security (e.g., applications, cloud, vulnerability management, firewalls) by researching, testing, and evaluating solutions (e.g., hardware, software, services) to determine if it aligns with industry best practices and County requirements in order to recommend appropriate solutions.
  
• Participates in the Countywide/Departmental Cybersecurity Incident Response Team and Cybersecurity Workgroups by assisting in the investigation of security incidents, development of appropriate security incident notification procedures, and the creation of a Disaster Recovery Plan/Business Continuity Plan in order to protect the department and County from internal and external information technology threats and vulnerabilities.
  
• Assists in developing and implementing departmental information technology security policies, standards, and procedures by analyzing information security models, conducting risk assessments, audits, and by recommending security best practices to ensure the integrity and security of the department’s information technology infrastructure.
  
• Stays current with knowledge of information technology security and applicable security, privacy and regulatory requirements (e.g., CCPA, PCI-DSS, Data Breach) by attending seminars/vendor conferences, training and webinars and reviewing information obtained from departmental memoranda, staff meetings, journals, professional publications, online media, etc. in order to keep up-to-date with information technology security trends and requirements.
  
• Assists in training users on information technology security and privacy awareness by developing and conducting training programs (e.g., online and in-person workshops) for workforce members and the public, and by disseminating information (e.g., email, newsletters, websites, security alerts) in order to promote security awareness.
  

Requirements

Selection Requirements:

Graduation from an accredited college with a bachelor's degree* in Computer Science, Information Systems, or a closely related field** AND two (2) years of full-time, paid experience within the last 5 years, assisting with the implementation, management, and monitoring of IT security solutions and programs, in industrial control systems*** and at least one (1) of the denoted functional areas:

• Incident Response Management (IRM)
• Network Security Management (NSM)
• Physical / Environmental Security (PES)
• Risk Assessment Management (RAM)
• Server Security Management (SSM)
• Workstation Security Management (WSM)

PHYSICAL CLASS:
Physical Class II - Light: This class includes administrative and clerical positions requiring light physical effort that may include occasional light lifting to a 10-pound limit, and some bending, stooping, or squatting. Considerable ambulation may be involved.

LICENSE:

A valid California Class C Driver License or the ability to utilize an alternative method of transportation when needed to carry out job-related essential functions.

SPECIAL REQUIREMENT INFORMATION:

*In order to receive credit for a bachelor's degree or higher degree, you MUST attach a legible copy of your "official" diploma, "official" transcripts, or "official" letter from an accredited institution which shows the area of specialization at the time of filing (preferred), or within five (5) business days from application submission. If you are unable to attach the required documents at the time of filing, you must email to Mortega@dpw.lacounty.gov within five (5) business days from the application submission. Please ensure to indicate the examination title and number on the subject of your email.

**Closely related fields include Computer Engineering; Computer Information Systems; Computer Science and Engineering; Electrical Engineering and Computer Science; Management Information Systems; and Mathematics with Computer Science. Any degree that is not specifically listed will be reviewed by an IT subject matter expert(s) to determine whether the degree qualifies.

*** Experience in Industrial Control Systems involves the monitoring, design, and troubleshooting of integrated systems utilized for overseeing and managing industrial processes and infrastructure, encompassing components such as Supervisory Control and Data Acquisition (SCADA) Security, Operational Technology, or equivalent systems within industrial settings.

Applications from persons with degrees from foreign universities will be accepted ONLY if evaluated and deemed to be equivalent to degrees from United States accredited institutions by an academic credential evaluation agency recognized by The National Association of Credential Evaluations Services or Association of International Credential Evaluation, Inc.

If you are unable to attach required documents, you must email them to mortega@dpw.lacounty.gov within five (5) business. Please include your name, exam number, and exam title on the documents.

DESIRABLE QUALIFICATIONS:

• Good understanding of networking concepts and protocols (e.g., Modbus, DNP3, TCP/IP, LAN, WAN, DHCP, DNS, routing protocols, etc.).
  
• Security Certification such as: Global Information Assurance Certification (GIAC), GIAC Critical Infrastructure Protection (GCIP), Global Industrial Cyber Security Professional (GICSP), GIAC Response and Industrial Defense (GRID), Certified Information Systems Security Professional (CISSP), or other comparable Security Certification.
  
  

Additional Information

EXAMINATION CONTENT:

This examination will consist of THREE (3) parts:

PART I: A multiple choice and/or simulation assessment(s), weighted at 40%, assessing:

• Reading Comprehension
• Professional Potential
• Achievement
• Coping with Uncertainty
• Responsibility
• Working to High Quality Standards
• Willingness to Learn
• Maintaining Good Working Relationships
• Analyzing Information
• Learning Quickly
• Generating New Ideas
• Using Time Efficiently
• Adapting to Change

PART II: An evaluation of training and experience, weighted 40%, assessing Professional Technical Knowledge and Problem Solving.

Applicants must meet the requirements and achieve a passing score of 70% or higher on the combined scores for Part I and II in order to proceed to Part III.

PART III: A multiple choice and/or simulation assessment(s), weighted at 20% assessing Professional/Technical Knowledge in the following area:

• Cyber Risk covering Knowledge of Cyber Risk Management, System and Application Security, Network Security, and Security Management.

MULTIPLE CHOICE AND/OR SIMULATION ASSESSMENTS ARE NOT REVIEWABLE BY CANDIDATES PER CIVIL SERVICE RULE 7.19.

Candidates must achieve a passing score of 70% or higher on each weighted part of the examination in order to be placed on the eligible list/register.

TESTING ACCOMMODATION:
If you require an accommodation to fairly compete in any part of the assessment process, please contact Monica Ortega at Mortega@dpw.lacounty.gov . You will be required to provide supporting documentation from a qualified professional justifying the requested accommodation(s). The sooner you contact us, the sooner we can respond to your request and keep you moving through the process.

ELIGIBILITY INFORMATION:

The names of candidates receiving a passing grade in the examination will be placed on the eligible register in order of their score group for a period of twelve (12) months following the date of promulgation.

Applications will be processed on an as-received basis and promulgated to the eligible register accordingly.

SPECIAL INFORMATION:

The County of Los Angeles is a Fair Chance employer. Except for a very limited number of positions, you will not be asked to provide information about a conviction history unless you receive a contingent offer of employment. The County will make an individualized assessment of whether your conviction history has a direct or adverse relationship with the specific duties of the job, and consider potential mitigating factors, including, but not limited to, evidence and extent of rehabilitation, recency of the offense(s), and age at the time of the offense(s). If asked to provide information about a conviction history, any convictions or court records which are exempted by a valid court order do not have to be disclosed.


All County workforce members must be fully vaccinated against COVID-19 as a condition of employment. Successful candidates for this position will be required to submit proof of vaccination against COVID-19 or request an exemption for qualifying medical or religious reasons during the onboarding process. Candidates should not present proof of vaccination until instructed to do so by the hiring department.

VACANCY INFORMATION:

The eligible register of successful candidates created from this exam will be used to fill vacancies throughout Public Works as they occur.

APPLICATION AND FILING INFORMATION:

Fill out your application completely. The acceptance of your application depends on whether you have clearly shown that you meet the REQUIREMENTS. Provide any relevant education, training, and experience in the spaces provided so we can evaluate your qualifications for the job. For each job held, give the name and address of your employer, your job title, beginning and ending dates, and description of work performed. All information included in the application materials is subject to VERIFICATION at any point during the examination and hiring process, including after an appointment has been made.

Important Notes:

• FALSIFICATION of any information may result in DISQUALIFICATION or RESCISSION OF APPOINTMENT.
• Utilizing VERBIAGE from Class Specification and/or Requirements serving as your description of duties WILL NOT be sufficient to meet the requirements. Doing so may result in an INCOMPLETE APPLICATION and you may be DISQUALIFIED.

APPLICATIONS MUST BE FILED ONLINE ONLY. APPLICATIONS SUBMITTED BY U.S. MAIL, FAX, OR IN PERSON WILL NOT BE ACCEPTED.

Apply online by clicking on the green “Apply” button at the top right of this posting. You can also track the status of your application using this website.

Plan to submit your online application well in advance of the deadline as you may be required to verify your email address. This only needs to be done once per email address, and if you already have a job seeker account on www.governmentjobs.com/careers/lacounty you can verify at any time by logging in and following the prompts. This is to enhance the security of your online application and to ensure you do not enter an incorrect email address.

SOCIAL SECURITY NUMBER: Please include your Social Security Number for record control purposes. Federal law requires that all employed persons have a Social Security Number.

COMPUTER AND INTERNET ACCESS AT PUBLIC LIBRARIES: For candidates who may not have regular access to a computer or the internet, applications can be completed on computers at public libraries throughout Los Angeles County.

NO SHARING OF USER ID, E-MAIL, AND PASSWORD: All applicants must file their application using their own user ID and password. Using a family member or friend’s user ID and password may erase a candidate’s original application record.

ANTI-RACISM, DIVERSITY, AND INCLUSION (ARDI): The County of Los Angeles recognizes and affirms that all people are created equal and are entitled to all rights afforded by the Constitution of the United States. The Department of Human Resources is committed to promoting Anti-racism, Diversity, and Inclusion efforts to address the inequalities and disparities amongst race. We support the ARDI Strategic Plan and its goals by improving equality, diversity, and inclusion in recruitment, selection, and employment practices.

CLICK HERE FOR ADDITIONAL EMPLOYMENT INFORMATION

CONTACT INFORMATION:
Department Contact Name: Monica Ortega
Department Contact Phone: (626) 458-2141
Department Contact Email: Mortega@dpw.lacounty .gov
ADA Coordinator Phone: (626) 458-2141
Teletype Phone: (626) 282-7829
California Relay Services: (800) 735-2922

For detailed information, please click here

• 

• Los Angeles County

• (800) 970-5478

Show more