Senior Cybersecurity Analyst (Senior Information Technologist)

**Senior Cybersecurity Analyst**(Senior Information Technologist) Salary may be negotiable within the applicable range of the classification and successful candidate's qualifications, subject to appropriate authorization. **OPEN TO THE PUBLIC**This recruitment will establish an open eligible list that will be used to fill current and future Senior Information Technologist positions. The eligible list established may also be used to fill positions in similar and/or lower classifications throughout the County of Orange. **DEADLINE TO APPLY**This recruitment will be open for a minimum of five (5) business days and will close on **Sunday, July 26, 2026 at 11:59pm (PST).** **ORANGE COUNTY INFORMATION TECHNOLOGY** The mission of [Orange County Information Technology](https://cio.ocgov.com/) (OCIT) is to provide innovative, reliable, and secure technology solutions that support County departments in the delivery of quality public services. OCIT provides IT solutions across County departments for voice communications, network services, application support, service desk, desktop support, as well as data center services. Click [here](https://cio.ocgov.com/) for more information on OCIT. Click [here](https://www.ocgov.com/) for more information on the County of Orange. **THE OPPORTUNITY** The Orange County Information Technology (OCIT)–Enterprise Cybersecurity Operations Team is seeking an experienced and dynamic supervisor who will oversee and assist a team of cybersecurity analysts in the continuous monitoring of the County's enterprise environmental assets, analyzing threats, mitigating vulnerabilities, detecting compromises, and conducting incident response. The Senior Cybersecurity Analyst will be responsible for the design, configuration, implementation, and ongoing support of County Enterprise tools. This position requires strong analytical and comprehension skills with written and communication experience. Responsibilities and duties for this position include, but are not limited to, the following: - Overseeing daily operations of the SOC - Ensuring the service ability and integrity of SOC equipment and tools - Supporting SOC efforts in digital forensics and eDiscovery - Serving as the subject matter expert on system security tools, including but not limited to SIEM, SOAR, EDR, IAM, PAM, IPS/IDS, Web Proxy Firewall, DLP, Email Security, and WAF, and providing technical leadership on toolset enhancements - Leading and performing threat hunting activities such as analysis of threat intelligence, detection and evaluation of IOCs, and escalation of incidents - Evaluating vendor solutions, making recommendations, and leading projects for deployment and/or enhancement of security systems - Participating in the incident response team and executing the County Incident Response Plan and cyber incident playbooks - Reviewing cybersecurity requests against normal operational security processes and providing approval or escalation **DESIRABLE QUALIFICATIONS AND CORE COMPETENCIES** In addition to the minimum qualifications, the ideal candidate will possess an Associate's or higher in Information Computer Sciences, Information Computer Technology, Information Systems, or a related field with at least three (3) years of security-related work experience in a cybersecurity, enterprise IT, or multidisciplinary IT environment. A certification in one of the following is preferred but not required: - CompTIA Security+ - CompTIA CySA+ - (ISC))² CISSP- Certified Information Systems Security Professional - (ISC)² CISM - Certified Information Security Manager - GCIL- GIAC Certified Incident Leader - GEIR - GIAC Enterprise Incident Response - GSOM- GIAC Security Operations Manager - GSOC- GIAC Security Operations Certified The ideal candidate will have experience in the following competencies: **Technical Knowledge** **| Technical Expertise** - Understanding of the NIST 800-53 framework and application of its controls in operational security - Understandi…