INFORMATION TECHNOLOGY SECURITY ANALYST (Industrial Control Systems)

Position/Program Information

EXAM NUMBER

C2602B

TYPE OF RECRUITMENT: Open Competitive

We welcome applications from anyone.

If you have questions about working for LA County, including current open recruitments, tips on creating a resume or acing an interview, career planning, or any other general information, please visit our website at https://hr.lacounty.gov/

For more information about the amazing benefits offered by Los Angeles County, please visit us here: https://hr.lacounty.gov/benefits/

APPLICATION FILING PERIOD:
The application filing period will begin on Tuesday, February 11, 2025, at 8:00 a.m. Pacific Time (PT) - Continuous. We will keep accepting applications until the position is filled. The application window may close unexpectedly once we have enough qualified candidates.

OUT-OF-CLASS EXPERIENCE OR WITHHOLDS WILL NOT BE ACCEPTED FOR THIS EXAMINATION. REQUIRED EXPERIENCE MUST BE FULLY MET AT THE TIME OF FILING.

Essential Job Functions

An Information Technology Security Analyst is responsible for performing a combination of the following essential job functions:

• Secures industrial control systems (e.g., Supervisory Control and Data Acquisition (SCADA) Security, Infrastructure, Threat Intelligence) by evaluating technical controls; developing and implementing mitigation strategies/best practices and monitoring threats in order to protect the department’s mission critical systems.
  
• Conducts audits of departmental information technology systems by leading inspections (e.g., field sites and offices), identifying potential information technology risks and vulnerabilities and by recommending remedial measures where appropriate in order to ensure the department is in compliance with all applicable County policies and standards, State and Federal laws, rules and regulations.
  
• Collaborates with the various individuals (e.g., technical teams, project managers, business users, management, vendors, business partners) by advising on the latest security policies and standards; developing remediation strategies and sharing best practices in order ensure the integrity and security of the department’s information technology infrastructure.
  
• Assesses department’s network security (e.g., firewalls, security logs, authentication servers, proxy servers) and control techniques by monitoring intrusion detection systems, firewall logs, access control lists; by investigating security incidents, reviewing security configurations periodically and by leading mitigation response with appropriate stakeholders in order ensure the integrity and security of the department’s information technology infrastructure.
  
• Conducts review of software related to information technology system security (e.g., applications, cloud, vulnerability management, firewalls) by researching, testing, and evaluating solutions (e.g., hardware, software, services) to determine if it aligns with industry best practices and County requirements in order to recommend appropriate solutions.
  
• Participates in the Countywide/Departmental Cybersecurity Incident Response Team and Cybersecurity Workgroups by assisting in the investigation of security incidents, development of appropriate security incident notification procedures, and the creation of a Disaster Recovery Plan/Business Continuity Plan in order to protect the department and County from internal and external information technology threats and vulnerabilities.
  
• Assists in developing and implementing departmental information technology security policies, standards, and procedures by analyzing information security models, conducting risk assessments, audits, and by recommending security best practices to ensure the integrity and security of the department’s information technology infrastructure.
  
• Stays current with knowledge of information technology security and applicable security, privacy and regulatory requirements (e.g., CCPA, PCI-DSS, Data Breach) by attending seminars/vendor conferences, training and webinars and reviewing information obtained from departmental memoranda, staff meetings, journals, professional publications, online media, etc. in order to keep up-to-date with information technology security trends and requirements.
  
• Assists in training users on information technology security and privacy awareness by developing and conducting training programs (e.g., online and in-person workshops) for workforce members and the public, and by disseminating information (e.g., email, newsletters, websites, security alerts) in order to promote security awareness.
  

Requirements

Specialty Requirements:

OPTION 1: Graduation from an accredited college with a bachelor's degree in Computer Science, Information Systems, or a closely related field* AND two (2) years of recent, full-time, paid experience** assisting with the implementation, management, and monitoring of IT security solutions and programs, in industrial control systems***, in one (1) or more of the denoted functional areas.

OPTION 2: One (1) year of recent, full-time, paid experience** assisting with the implementation, management, and monitoring of IT security solutions and programs, in industrial control systems***, in one (1) or more of the denoted functional areas, as an Application Developer II, Information Systems Analyst II, Network Systems Administrator II, Operating Systems Analyst, Senior Information Technology Technical Support Analyst, or Telecommunications Systems Engineer.

OPTION 3: Three (3) years of recent, full-time, paid experience** assisting with the implementation, management, and monitoring of IT security solutions and programs, in industrial control systems***, in one (1) or more of the denoted functional areas.

Denoted functional areas:

• Incident Response Management (IRM)
• Network Security Management (NSM)
• Physical / Environmental Security (PES)
• Risk Assessment Management (RAM)
• Server Security Management (SSM)
• Workstation Security Management (WSM)

Note: Please click the following link for a full description of Los Angeles County's Information Technology Security Analyst classification specification item #2602 and the denoted functional areas.

PHYSICAL CLASS:
Physical Class II - Light: This class includes administrative and clerical positions requiring light physical effort that may include occasional light lifting to a 10-pound limit and some bending, stooping, or squatting. Considerable ambulation may be involved.

LICENSE:

A valid California Class C Driver License or the ability to utilize an alternative method of transportation when needed to carry out job-related essential functions.

To receive credit for your education, include a copy of your official diploma, official transcript, or letter/certificate from an accredited institution within 5 (five) business days from the date of filing application. If you are unable to upload the required documents, please submit documentation to Mortega@dpw.lacounty.gov and indicate your name, the exam name, and the exam number. The document should show the date the degree was conferred and be in English; if it is in a foreign language, it must be translated and evaluated for equivalency to U.S. standards. For more information on our standards for educational documents, please visit: https://file.lacounty.gov/SDSInter/dhr/070812_PPG123.pdf and https://file.lacounty.gov/SDSInter/dhr/205105_PPG_123_ACE_Resource_Guide.pdf

If you are a veteran, you may be eligible for veteran’s credit, which is an additional 10% of the total points added to a passing score. We will need a copy of your form DD214 to review, so please include that with your application or email it to the exam analyst at Mortega@dpw.lacounty.gov within 5 (five) business days from the date of filing application

SPECIAL REQUIREMENT INFORMATION:

*Closely related fields include Computer Engineering; Computer Information Systems; Computer Science and Engineering; Electrical Engineering and Computer Science; Management Information Systems; and Mathematics with Computer Science. Any degree that is not specifically listed will be reviewed by an IT subject matter expert(s) to determine whether the degree qualifies.

**Recent full-time paid experience for this exam refers to work gained within the past 5 years.

***Experience in Industrial Control Systems involves the monitoring, design, and troubleshooting of integrated systems utilized for overseeing and managing industrial processes and infrastructure, encompassing components such as Supervisory Control and Data Acquisition (SCADA) Security, Operational Technology, or equivalent systems within industrial settings.

We do not accept password-protected documents. Ensure documents are unlocked before attaching to your application or sending to the exam analyst.

If you are unable to attach required documents, you must email them to mortega@dpw.lacounty.gov within 5 (five) business days from the date of filing application. Please include your name, exam number, and exam title on the documents.

DESIRABLE QUALIFICATIONS:

• Security Certification such as: Global Information Assurance Certification (GIAC), GIAC Critical Infrastructure Protection (GCIP), Global Industrial Cyber Security Professional (GICSP), GIAC Response and Industrial Defense (GRID), Certified Information Systems Security Professional (CISSP), or other comparable Security Certification.
  

Additional Information

EXAMINATION CONTENT:

This examination will consist of THREE (3) parts:

PART I: A multiple choice and/or simulation assessment(s), weighted at 40%, assessing:

• Reading Comprehension
• Professional Potential
• Achievement
• Coping with Uncertainty
• Responsibility
• Working to High Quality Standards
• Willingness to Learn
• Maintaining Good Working Relationships
• Analyzing Information
• Learning Quickly
• Generating New Ideas
• Using Time Efficiently
• Adapting to Change

PART II: An evaluation of training and experience, weighted 40%, assessing Professional Technical Knowledge and Problem Solving. This assessment type will evaluate the training, experience, and education you list on a questionnaire and assign a score based on a standardized scoring system.

Applicants must meet the requirements and achieve a passing score of 70% or higher on the combined scores for Part I and II in order to proceed to Part III.

PART III: A multiple choice and/or simulation assessment(s), weighted at 20% assessing Professional/Technical Knowledge in the following area:

• Cyber Risk covering Knowledge of Cyber Risk Management, System and Application Security, Network Security, and Security Management.

MULTIPLE CHOICE AND/OR SIMULATION ASSESSMENTS ARE NOT REVIEWABLE BY CANDIDATES PER CIVIL SERVICE RULE 7.19.

Candidates must achieve a passing score of 70% or higher on Part III of the examination in order to be placed on the eligible register .

If you have taken identical components recently for other exams, your responses may be automatically transferred to this examination. This exam contains test components that might be used on future exams, and your responses could be transferred to that exam.

We provide study guides and other test preparation resources to help candidates prepare for employment tests. While the guides may help in preparing for the test, we recommend reviewing all related materials that seem necessary.

• Various information can be found on our website at https://hr.lacounty.gov/job-search-toolkit/ . The section dedicated to test preparation is "Employment Test Assistance."
• Online practice tests are available at https://www.shldirect.com/en-us/practice-tests .

TESTING ACCOMMODATION:

If you need accommodation to take the assessment, let us know by contacting the exam analyst at Mortega@dpw.lacounty.gov . The sooner you contact us, the sooner we can respond to your request and keep you moving through the process.

ELIGIBILITY INFORMATION:

Applications will be processed as they are received and added to the register accordingly

SPECIAL INFORMATION:

The County of Los Angeles is a Fair Chance employer. Except for a very limited number of positions, you will not be asked to provide information about a conviction history unless you receive a contingent offer of employment. The County will make an individualized assessment of whether your conviction history has a direct or adverse relationship with the specific duties of the job, and consider potential mitigating factors, including, but not limited to, evidence and extent of rehabilitation, recency of the offense(s), and age at the time of the offense(s). If asked to provide information about a conviction history, any convictions or court records which are exempted by a valid court order do not have to be disclosed. Qualified applicants with arrest or conviction records will be considered for employment in accordance with County Fair Chance Policies and the Fair Chance Act (Gov. Code Section 12952).

VACANCY INFORMATION:

The list of successful candidates created from this exam will be used to fill vacancies throughout Public Works as they occur.

APPLICATION AND FILING INFORMATION:

We only accept applications filed online. Applications submitted by U.S. mail, fax, or in person are not accepted. Apply online by clicking on the "Apply" green button at the top right of this posting. This website can also be used to get application status updates.

Please fill out the application completely. Provide relevant job experience including employer's name and address, job title, beginning and ending dates, number of hours worked per week, and description of work performed.

We may verify information included in the application at any point during the examination and hiring process, including after an appointment has been made. Falsification of information could result in refusal of application or rescission of appointment. Copying verbiage from the Requirements or class specification as your work experience will not be sufficient to demonstrate meeting the requirements. Doing so may result in an incomplete application and may lead to disqualification.

We will send notifications to the email address provided on the application, so it is important that you provide a valid email address. If you choose to unsubscribe or opt out from receiving our emails, it is possible to view notices by logging into governmentjobs.com and checking the profile inbox. It is every applicant's responsibility to take steps to view correspondence, and we will not consider claims of missing notices to be a valid reason for re-scheduling an exam part. Register the below domains as approved senders to prevent email notifications from being filtered as spam/junk mail.
• info@governmentjobs.com
• talentcentral@shl.com
• noreply@proctoru.com
• donot-reply@amcatmail.com

New email addresses need to be verified. This only needs to be done once per email address and can be done at any time by logging in to govermentjobs.com and following the prompts. This is to enhance the security of the online application and to prevent incorrectly entered email addresses.

SOCIAL SECURITY NUMBER: Federal law requires that all employed persons have a Social Security Number, so include yours when applying.

COMPUTER AND INTERNET ACCESS AT PUBLIC LIBRARIES: Computer and Internet Access at Public Libraries: For candidates who may not have regular access to a computer or the internet, applications can be completed on computers at public libraries throughout Los Angeles County

NO SHARING OF USER ID, E-MAIL, AND PASSWORD: All applicants must file their application using their own user ID and password. Using a family member or friend’s user ID and password may erase a candidate’s original application record

ANTI-RACISM, DIVERSITY, AND INCLUSION (ARDI): The County of Los Angeles recognizes and affirms that all people are created equal and are entitled to all rights afforded by the Constitution of the United States. We are committed to promoting Anti-racism, Diversity, and Inclusion efforts to address the inequalities and disparities amongst races. We support the ARDI Strategic Plan and its goals by improving equality, diversity, and inclusion in recruitment, selection, and employment practices.

CLICK HERE FOR ADDITIONAL EMPLOYMENT INFORMATION

CONTACT INFORMATION:
Department Contact Name: Monica Ortega
Department Contact Phone: (626) 458-2141
Department Contact Email: Mortega@dpw.lacounty .gov
ADA Coordinator Phone: (626) 458-2141
Teletype Phone: (626) 282-7829
California Relay Services: (800) 735-2922

For detailed information, please click here

Closing Date/Time: Continuous

• 

• Los Angeles County

• (800) 970-5478

Show more