Job Description

Job Description and Duties

This position offers an exciting opportunity to participate in delivering a new Comprehensive Child Welfare Information System (CCWIS) with Child Welfare Digital Services (CWDS), a unique collaboration involving the California Health and Human Services Office of Technology and Solutions Integration (CalHHS OTSI), the California Department of Social Services (CDSS), and California's Counties and Tribes.

Under the direction of the Information Security Chief (Information Technology Manager I), the Information Technology Specialist I (Information Security Engineer) will develop and maintain a secure posture for CWDS projects.

Duties include:

• Execution of Penetration and Vulnerability Scans,

• Respond to, investigate, and resolve Security alerts and Incidents

• Perform appropriate follow-up tasks with partner teams and CWDS leadership to report and help mitigate vulnerabilities.

• Define and drive implementation of security policies, standards, and procedures as necessary in adherence of state and federal compliance requirements.

• Act in accordance with Code of Ethics and demonstrate professionalism and respectful interactions with internal and external partners.

*This position requires the incumbent to participate in an on-call rotation for Security incidents. While on-call, the incumbent will carry a cell phone and be available for duty 24X7.*

**The salary for this position will be the base of the classification if candidates are not currently employed by the state. This does not include additional forms of compensation such as benefits and retirement. Hiring above minimums are not available for the IT Classification Series.**

You will find additional information about the job in the .

Working Conditions

This position is currently eligible for one telework day per-week and is required to report in-person a minimum of four days per week. The amount of telework is at the discretion of the OTSI and is subject to operational needs.

Business travel may be required.  All commute expenses to the reporting location will be the responsibility of the selected candidate.  The OTSI office location for this position is 2870 Gateway Oaks, Sacramento, CA.

Travel reimbursement considerations take into account an employee’s home address and designated reporting location and are subject to applicable policies, rules, regulations, and bargaining unit contract provisions.

On July 1, 2025, the California Department of Human Resources (CalHR) implemented the temporary Personal Leave Program 2025 (PLP 2025).  PLP 2025 directs that each employee receives a temporary reduction in pay in exchange for PLP 2025 leave credits. The temporary salary reduction percentage and the number of PLP 2025 leave credits are based on the position’s associated bargaining unit.  The salary range(s) included in this job advertisement do not include the temporary salary reduction.  Please reach out to the hiring unit contact listed on this job advertisement for details.

Candidates who reside outside of the State of California may be admitted to the job interview but must be a resident of California for employment.

Special Requirements

Simple Application Steps:

If you are interested in this position, complete the following simple steps:

1. Review the education and experience minimum qualifications (MQ’s) of the Information Technology Specialist I Classification  . See the Minimum Requirements section above.
2. Complete the supplemental questionnaire and the state application by clicking “Apply Now” above. See below for detailed application instructions.
3. Submit your application package with all required documents, which include the supplemental questionnaire - see the "Required Application Package Documents" section below.
4. Once you have applied, take the 

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

- Knowledge of Information Security Concepts, Risks, and Best Practices

- Information Security Certification(s) in active status is desirable.

- Experience in security control frameworks and practical application (NIST 800-53, etc.)

- Well developed analytical skills to evaluate current security practices and potential security risks.

- Experience in security Incident management using NIST frameworks

- Experience in using one or more Security Vulnerability scan tools.

- Experience applying federal state, and/or local security policies, standards, and procedures.

- Knowledge of Infrastructure as a Service environments such as AWS.

- Knowledge of Security Information and Event Management (SIEM) tools such as Splunk.

Benefits

OTSI is dedicated to creating an innovative workplace for its team members that is inclusive, diverse, and interactive! Here are a few of the ways we stay engaged with our team:

• Ongoing professional development and engagement opportunities.
• Employee Assistance Program (EAP).
• Free Parking!

Additionally, as a team member of the State of California, you may be eligible for many benefits, such as:

• Medical, including health, dental, and vision insurance.
• Paid Holidays and vacation/leave
• Defined retirement program
• Savings Plus Program (401(k), 457)
• Medical/Dependent Care Reimbursement Accounts

Full benefits information can be found on CalHR's 

Supplemental Questionnaire

When responding to the supplemental questionnaire, applicants must follow these below instructions. Failure to follow these instructions may result in disqualification from this exam/hiring process.:

• Responses must be typewritten on 8 1/2" x 11" paper, no more than (1) page in length, and using font no smaller than size 11.
• Responses are to be complete, specific, clear, and concise.
• Responses to the question should be easily identified (e.g. by numbering the response to the corresponding question, or repeating the prompt in response).

Without the use of Artificial Intelligence (AI) or ChatGPT, please answer the following question:

1. What skills, certifications and/or experience would you continue to seek in this type of role?  Of the core cybersecurity domains and given the duty statement, which do you believe will be exercised most in this role?  Please explain why, using one or more examples. Be specific in your responses, but please ensure that you do not divulge sensitive information.

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• Supplemental Application - A Supplemental Questionnaire is required. Please see the Supplemental Questionnaire Instructions below.

Job Tags

Permanent employment, Full time, Contract work, Work at office, Local area, Remote work, 1 day per week

Similar Jobs