Job Posting: Cyber Incident Response Manager

California Governor's Office of Emergency Services

JC-397695
-
Cyber Incident Response Manager
ASSISTANT TO THE GOVERNOR/GOVERNOR'S OFFICE

$11,134.00 - $12,410.00 per Month

Final Filing Date: 6/6/2024

Job Description and Duties

Join the California Governor's Office of Emergency Services (Cal OES) and be part of an organization that serves as a leader in emergency management and homeland security through dedicated service to all.

The California Cyber Security Integration Center (Cal-CSIC) is an integral part of the Governor’s Office of Emergency Services’ (Cal OES) Homeland Security mission. The Cyber Operations Team is a multi-agency coordination center integrating all aspects of California’s cybersecurity mission statewide. The Cyber Operations support the state’s Homeland Security strategy through statewide alert monitoring, incident response, root cause analysis, hunting, lab management, and continuous training.

Under the general direction of the Information Technology Manager II (ITM II), the Cyber Incident Response Manager will provide supervision, direction, focus and oversight of the incident response teams efforts in responding to cyber incidents, resource planning, allocation and completing acquisition requirements for new technologies to support incident response intelligence and mitigation practices. The Cyber Incident Response Manager coordinates with and provides high-level expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents. Responsible for coordinating incident response functions with Cal-CSIC partners and leads activities with entities requesting assistance from the Cal-CSIC. Responsible for writing and publishing after-action reviews. Responds to crises or urgent situations within the pertinent domain to mitigate immediate and potential threats. Uses mitigation, preparedness, and response and recovery approaches, as needed, to maximize survival of life, preservation of property, and information security. Investigates and analyzes all relevant response activities and works with the Cal-CSIC Forensic Lead.

EXPERIENCE/SKILL REQUIREMENTS:
  • Possesses a deep level understanding of both Windows, Linux, and networking security. Demonstrable experience using defensive measures (firewalls, IDS/IPS, EDR, etc.) and analysis of security information collected from a variety of sources (packet captures, Windows logs, Linux logs, disk images, memory images, etc.) to identify, analyze, and report events that occur or might occur within the enterprise network.
  • Understands both offensive and defensive cyber techniques, Mitre Attack Framework, and relevant laws, legal authorities, restrictions, and regulations pertaining to cyber defense activities.
This announcement is a re-advertisement. If you previously submitted an application for this vacancy, your application is under consideration, and you do not need to submit it again. 

You will find additional information about the job in the Duty Statement.

Working Conditions

  • Applicant will, at a minimum, possess a valid CompTIA Security+ Certificate or equivalent from an acceptable equivalent source according to industry standards, such as the ISC2 Systems Security Certified Practitioner. The applicant will also obtain a ISC2 Certified Information Systems Security Professional (CISSP) within a year of starting.
  • Must be able to obtain and maintain a Federal SECRET clearance.
  • May have to deploy to remote locations within the state of California in support of incident response for a period of up to one-week with short notice.

Minimum Requirements

This position does not have a Classification Specification. Requirements and qualifications for this position can be found in this announcement. For additional questions, please contact the hiring department listed below.

    Additional Documents

    Position Details

    Job Code #:
    JC-397695
    Position #(s):
    163-420-5314-905
    Working Title:
    Cyber Incident Response Manager
    Classification:
    ASSISTANT TO THE GOVERNOR/GOVERNOR'S OFFICE
    $11,134.00 - $12,410.00
    # of Positions:
    1
    Work Location:
    Sacramento County
    Telework:
    In Office
    Job Type:
    Exempt Executive Assignment - Non Tenured, Full Time

    Department Information

    The California Governor’s Office of Emergency Services (Cal OES) is committed to fostering a diverse and inclusive culture by hiring and retaining individuals from a variety of backgrounds and personal experiences. Our employees are empowered with the tools and resources necessary to meet our mission, while continuing to expand equity and inclusion efforts at all levels of the organization. We are committed to the spirit and work required to ensure the safety and resilience of every community in California.

    The California Governor’s Office of Emergency Services (Cal OES) is an emergency response, homeland security, and disaster recovery agency and as a result, is a dynamic and exciting place to work in a team-oriented environment. Cal OES provides training to enhance the understanding of emergency and incident management to all employees.

    Homeland Security is the coordinated effort to ensure we are prepared to prevent, protect against, mitigate, respond to and recover from threats and acts of terrorism, plus other man-made or natural disasters or catastrophes. It requires a risk management process in order to ensure California has the right capabilities in place to manage those hazards that pose the greatest risk to the State, its people, and its critical infrastructure and key resources.

    More information regarding Homeland Security Directorate may be found here: Homeland Security | California Governor's Office of Emergency Services

    In the event of an emergency, employees may be contacted and requested to report to work in the event of an emergency. This contact may be outside of your normal working hours (evenings/nights, weekends, and holidays). This service may require irregular work hours, work locations other than the official duty location, and may include duties other than those specified in your official position description. Travel requirements in support of emergency operations may be extensive in nature (weeks to months), with little advance notice, and you may be required to relocate to emergency sites.

    Special Requirements

    Interested candidates must submit the online Governor’s Appointment Application directly from the Office of the Governor’s website at: Governor's Appointment Application to be considered for this position. In the application, select "Emergency Services, Cyber Incident Response Manager" from the dropdown menu under "Position Sought." The Office of the Governor manages all recruitments for exempt positions.

    Prior to submission, please ensure that all documents are free of any confidential information (such as social security numbers or dates of birth). A complete application package consists of a resume and the Governor’s Office application, which should be filled out on their website.

    Please disregard the “Who May Apply” and "How to Apply" language as it is not applicable for this position. Only the most qualified candidates will be invited for interview. A recommendation will be made to the Governor’s Office for appointment to this Exempt position.

    Application Instructions

    Completed applications and all required documents must be received or postmarked by the Final Filing Date in order to be considered. Dates printed on Mobile Bar Codes, such as the Quick Response (QR) Codes available at the USPS, are not considered Postmark dates for the purpose of determining timely filing of an application.

    Final Filing Date: 6/6/2024

    Who May Apply

    This is a non-testing Classification, therefore, anyone meeting the Minimum Qualifications listed on the Classification Specification may apply for this position. Individuals in specific programs, such as the Welfare to Work Program, are encouraged to apply and will be given priority according to the applicable Laws and Rules. Please note on your application your current participation in these programs. Individuals who are eligible to be appointed to this Exempt Position by the State of California.

    Applications will be screened and only the most qualified applicants will be selected to move forward in the selection process.     Applicants must meet the Minimum Qualifications stated in the Classification Specification(s).

    How To Apply

    Complete Application Packages (including your Examination/Employment Application (STD 678) and applicable or required documents) must be submitted to apply for this Job Posting. Application Packages may be submitted electronically through your CalCareer Account at www.CalCareers.ca.gov. When submitting your application in hard copy, a completed copy of the Application Package listing must be included. If you choose to not apply electronically, a hard copy application package may be submitted through an alternative method listed below:

    Address for Mailing Application Packages

    You may submit your application and any applicable or required documents to:

    California Governor's Office of Emergency Services
    Attn: Human Resources - Heather Sakrani
    Human Resources Recruitment
    10370 Peter A McCuen Boulevard
    Mather, CA 95655

    Address for Drop-Off Application Packages

    You may drop off your application and any applicable or required documents at:

    California Governor's Office of Emergency Services
    Human Resources - Heather Sakrani
    Human Resources Recruitment
    10370 Peter A McCuen Boulevard
    Mather, CA 95655
    Drop off application to HR window, 2nd floor during business hours, excluding holidays and weekends.
    08:00 AM - 05:00 PM

    Required Application Package Documents

    The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

    • Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at www.CalCareers.ca.gov. All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
    • Resume is required and must be included.
    Applicants requiring reasonable accommodations for the hiring interview process must request the necessary accommodations if scheduled for a hiring interview. The request should be made at the time of contact to schedule the interview. Questions regarding reasonable accommodations may be directed to the EEO contact listed on this job posting.

    Desirable Qualifications

    In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:
    • Effective and persuasive communicator, both orally and in writing, to all levels of officials and the public.
    • Excellent analytical and problem-solving skills along with the demonstrated ability for achieving positive results.
    • Personal characteristics that include a commitment to teamwork and a collaborative attitude.
    • Knowledge of various security methodologies and processes.
    • Excellent management skills to direct an experienced professional staff.
    • Possess ability to work at speed, under pressure, to make decisions in real time and with reliable accuracy.

    Benefits

    There are many benefits that come with this position, from an employee pension managed by the California Public Employees Retirement System (CalPERS) to health, dental, and vision plans. This position may be eligible for a pay differential. The Savings Plus Program provides additional opportunities to save for retirement with 401(k) and 457 Plans. We offer on-the-job training towards becoming a certified emergency management professional. You will be asked to encourage and counsel staff in their professional development, training, and upward mobility. There are also opportunities to work with many other state agencies and departments, federal partners, as well as local and non-profit partners.

    Benefit information can be found on the CalHR website and the CalPERS website.

    Equal Opportunity Employer

    The State of California is an equal opportunity employer to all, regardless of age, ancestry, color, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding and related medical conditions), and sexual orientation.

    It is an objective of the State of California to achieve a drug-free work place. Any applicant for state employment will be expected to behave in accordance with this objective because the use of illegal drugs is inconsistent with the law of the State, the rules governing Civil Service, and the special trust placed in public servants.

    Application Methods:
    Electronic (Using your CalCareer Account)
    By Mail
    Drop-off
    Print Job