IT Security Analyst III

Salary : $108,513.28 - $176,869.88 Annually
Location : Riverside
Job Type: Regular
Job Number: 26-77270-01
Department: District Attorney
Division: District Attorney
Opening Date: 10/28/2026
Closing Date: 11/9/2026 11:59 PM Pacific

For questions regarding this position, please contact the Recruiter listed in the Supplemental Information section.
ABOUT THE POSITION
The Riverside County District Attorney' s Office is seeking an experienced Information Security Analyst III (ISA III) in Riverside. The ISA III will serve as a senior-level security professional focused primarily on security monitoring, governance, and incident response with some emphasis on programming or tool development. This role supports the DA's Office security posture by implementing and maintaining security policies and standards, overseeing security compliance, and participating in enterprise risk and governance efforts. The analyst will conduct advanced monitoring of intrusion detection systems, firewall logs, and system activity to identify threats and coordinate mitigation responses.

The incumbent will also play a critical role in emergency preparedness and operational resilience by developing and maintaining Emergency Operations Plans, supporting disaster recovery and business continuity activities, and maintaining inventory tracking methodologies for critical assets. This role participates in the security incident response team, evaluates security events, and provides recommendations to management.

Additional responsibilities include performing vulnerability assessments and penetration testing, conducting forensic investigations while preserving evidence integrity, and collaborating with internal departments to ensure secure system designs and adherence to enterprise security architecture. This position requires strong analytical ability, sound judgment, and expertise in monitoring, governance, and investigative practices rather than programming or systems development.

Experience with Security Information and Event Management (SIEM) systems is highly desired. Candidates should have hands-on experience working with SIEM platforms, including tuning alerts, reviewing correlation logic, and triaging SIEM-generated events. Knowledge of log ingestion best practices is also preferred, though only minimal scripting is needed for this role.

Meet the Team!

The , as the public prosecutor acting on behalf of the People, vigorously enforces the law, pursues the truth, protects those victimized by crime, exonerates the innocent, and safeguards the rights of all to ensure that justice is done on behalf of our community. The office's staff of over 700 is comprised of prosecuting attorneys, sworn investigators, victim-witness advocates, paralegals, investigative technicians, forensic analysts, and a wide range of information technology and supporting staff all committed to excellence and integrity in public service. We are, and we seek to maintain, a diverse workforce to match a diverse county.
EXAMPLES OF ESSENTIAL DUTIES
Implement and maintain global security policies, standards, guidelines, and procedures to ensure ongoing security compliance; recommend security improvements; ensure that technology decisions made are compliant with Enterprise Security Architecture.
Develop, analyze and maintain Emergency Operations Plans; research, develop, document and implement tracking and inventory methodologies for maintaining inventory of critical assets.
Perform vulnerability scans and penetration tests; develop and maintain scripts, routines, and software to perform vulnerability threat assessments; coordinate County disaster recovery and business continuity tasks.
Participate as a member of the security incident response team; evaluate security incidents, developing solutions and communicating results to management.
Manage a computer crime or incident scene, including recognition of the proper investigative approach, conducting a field of search to establish probable cause for seizure, proper collection methods, evidence preservation, transportation, computer forensic analysis, and case management; use various security tools and prepare reports on findings.
Monitor and review intrusion detection systems and firewall logs, analyzing events and patterns and coordinating mitigation responses; review firewall and router rules and access control lists; research technical and security topics and maintain information on industry trends; review and analyze system logs and access lists.
Perform design review and analysis; perform threat and risk analysis; develop and evaluate plans, principles, and procedures for accomplishing customer security studies and provide professional analysis of methods and objectives.
Develop and analyze information security models, maintaining methodology to track Security Plans for each sensitive and critical application and general support system within the organizations.
Respond to and assist in information security assessment requests; evaluate vendor products and services; advise management of risks and best security practices.
Coordinate implementation and modification of enterprise and departmental DMZ's; perform design review and analysis; collaborate on security solutions with departments.

MINIMUM QUALIFICATIONS
Education: Successful completion of the education required to possess and maintain current certification within guidelines established by the International Information Systems Security Certification Consortium, Inc. or (ISC) as a Certified Information Systems Security Professional (CISSP).

Experience: Five years of progressively responsible experience in information security, including extensive experience and knowledge of Linux and Microsoft operating systems. This experience must include performing vulnerability scans and penetration tests; developing or maintaining scripts, routines, or tools used for vulnerability and threat assessments; coordinating disaster recovery and business continuity activities; conducting security design reviews and analyses; performing threat and risk assessments; and developing or evaluating plans, principles, and procedures to support security studies and provide professional analysis of methods and objectives.. Military or law enforcement experience is desired.

Knowledge of: Standard security practices; network architecture, routing, and TCP/IP protocols; Linux and Microsoft operating systems; project planning and management; use of third-party applications and native scripts and languages; risk assessment process and practices; general business processes and standards associated with areas of assignment.

Ability to: Perform cyber-attack trend analysis; project planning and management; conduct independent systems analysis of complex business processes; manage evidentiary process; maintain the chain-of-custody process and procedures; conduct investigations and coordinate security anomalies and events; interact with customers and vendors on the phone and in person; perform business continuity planning, documentation and evaluation; establish and maintain excellent customer service and relationships.
Other Requirements
Background: A successful Security Clearance conducted by the DA is required for positions within the Riverside County Office of the District Attorney.
License/Certificate: Must possess and maintain current certification within guidelines established by the International Information Systems Security Certification Consortium, Inc., or (ISC) as a Certified Information Systems Security Professional (CISSP) by (ISC) .

Possession of a valid California Driver's License may be required.

SUPPLEMENTAL INFORMATION

This position is in office in Riverside.

General Information
If you have any questions regarding this posting, please contact Angie Tavaglione at or . Please allow 1-2 business days for a response to general inquiries.
APPLICATION INFORMATION

Veteran's Preference
The County has a Veterans Preference Policy applicable to new hires. To qualify, attach the required documents to your job application. Documents include a copy of your (or your spouse's) Member-4 Form DD-214 indicating dates of service. For spousal preference, and as applicable, the following documents: a copy of your marriage certificate, spouse's death certificate, a letter of spouse's disability and/or letter of service-related death (if available) from the U.S. Veteran's Administration. For privacy reasons, it is recommended that you remove your social security information from the document(s). A Human Resources Representative will review the materials and determine if you qualify for veterans' preference. For complete details and documentation requirements, please review the Veterans Preference Policy, C-3 here:
Reasonable Accommodations
The County of Riverside is committed to providing reasonable accommodation to applicants as required by the Americans with Disabilities Act (ADA) and Fair Employment and Housing Act (FEHA). Qualified individuals with disabilities who need a reasonable accommodation during the application or selection process should contact the recruiter for the position noted above. For additional information and/or to obtain the appropriate form for requesting a reasonable accommodation, please visit the Disability Access Office web page located at:
Schedule, Overtime, Standby/On-Call, and Travel Obligations
The County of Riverside offers a variety of alternative work schedules, dependent upon department operations and needs. Certain assignments may involve overtime, standby/on-call shifts, and/or travel; however, scheduling, shift assignments, overtime work, standby/on-call duty, and travel obligations are subject to management approval, operational needs, and/or may be modified or discontinued at any time. Applicants should contact the assigned recruiter for additional information regarding the schedule, overtime and standby/on-call expectations, and travel obligations.
Proof of Education
If using education to qualify or when requested by the recruiter, upload a copy of any license(s), official/unofficial transcript(s), degrees, and/or related employment documents to your NeoGov account at the time of application and before the closing date. Official or unofficial transcripts will be accepted.

If your education was completed outside of the United States, you will need to provide a copy of your Foreign Education Equivalency evaluation from a member of the National Association of Credential Evaluation Services () or Association of International Credential Evaluators, Inc. ().
Work Authorization Requirement
Applicants must be legally authorized to work in the United States at the time of application. The County of Riverside does not participate in visa sponsorship programs, including H1-B visas, and will not provide sponsorship for any employment-based visas.
Equal Opportunity Employer
The County of Riverside is an Equal Opportunity Employer. It is the policy of the County of Riverside to provide equal employment opportunities for all qualified persons. All applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, sexual orientation, gender, gender identity, gender expression, marital status, ancestry, medical condition (cancer and genetic characteristics), genetic information, or denial of medical and family care leave, or any other non-job-related factors.
Pre-Employment
All employment offers are contingent upon successful completion of pre-employment requirements including a criminal background investigation, which involves fingerprinting. (A felony or misdemeanor conviction may disqualify the applicant from County employment). A pre-employment physical examination and background check may be required.
Probationary Period
As an Approved Local Merit System, all County of Riverside employees, except those serving "At Will," are subject to the probationary period provisions as specified in the applicable Memorandum of Understanding, County Resolution, or Salary Ordinance. Temporary and Per Diem employees serve at the pleasure of the agency/department head.
General Information
Current County of Riverside and/or current employees of the hiring department may receive priority consideration. Qualified candidates may be considered for future County vacancies.
Job postings may close without notice based on application volume. Submit your complete application by the recruitment close date; no late applications are accepted. Ensure all relevant experience/education is reflected on your application/resume, as a failure to demonstrate position requirements may disqualify applicants. A description of job duties directly copied from the job classification or job posting will not be considered.
Please read and follow any special application instructions on this posting. Click the 'Apply' link located on this page to submit your application. For additional instructions on the application process, examinations, Veteran's preference, pre-employment accommodation or other employment questions, please refer to our web site,
If you are experiencing technical problems, you may contact the governmentjobs.com applicant support desk Monday through Friday, 6 am to 5 pm Pacific Time at or toll-free 1-.
BENEFIT PROGRAM: MCU
MEDICAL/DENTAL INSURANCE: A Flexible Benefit Credit is provided on a monthly basis as governed by the Management Resolution or applicable bargaining unit. Vision coverage is provided through Vision Service Plan (VSP) at no cost to employee or eligible dependents.

Note: Employees on assignment through the Temporary Assignment Program (TAP) receive different benefits. See the list
MISCELLANEOUS RETIREMENT: County of Riverside has three retirement Tiers through the California Public Employees' Retirement System (CalPERS).

• Tier I (Classic Member - Formula 3% @ 60): Applicable to current and former County of Riverside local miscellaneous employees hired prior to 08/24/2012 and did not withdraw CalPERS contributions. The employee contribution is eight (8%) percent.
• Tier II (Classic Member - Formula 2% @ 60): Applicable to local miscellaneous employees 1) hired after 08/23/2012 through 12/31/2012; 2) Previously employed with another CalPERS contracting public agency or a reciprocal retirement system, with a break in service of less than six months between the separation date with the previous employer and the appointment date with the County of Riverside. The employee contribution is seven (7%) percent.
• Tier III (PEPRA New Member - Formula 2% @ 62): Applicable to CalPERS local miscellaneous new members hired on or after the implementation of the Public Employees' Pension Reform Act of 2013 (PEPRA) which took effect January 1, 2013. Effective July 1, 2023, the employee contributions are 7.25% and will increase to 7.75% effective July 1, 2024.

A new member is defined as any of the following:

1. A new hire who enters CalPERS membership for the first time on or after January 1, 2013, and who has no prior membership in any California Public Retirement System.
2. A new hire who enters CalPERS membership for the first time on or after January 1, 2013, and who was a member with another California Public Retirement System prior to that date, but who is not subject to reciprocity upon joining CalPERS.
3. A member who first established CalPERS membership prior to January 1, 2013, and who is rehired by a different CalPERS agency after a break in service of greater than six (6) months.

CalPERS refers to all members that do not fit within the definition of a new member as "classic members".

Contribution rates are subject to change based on the County of Riverside annual actuarial valuation.

Note:

This summary is for general information purposes only. Additional questions regarding retirement formulas can be sent to or by calling the Benefits Information Line at ,
Option 2.

If you have prior service credit with another CalPERS agency or within agencies, please contact CalPERS at to determine which retirement tier would be applicable to you. CalPERS is governed by the Public Employees' Retirement Law. The Retirement Law is complex and subject to change. If there's any conflict between this summary and the law, the law will prevail over this summary.
DEFERRED COMPENSATION: Voluntary employee contribution with a choice between two 457 deferred compensation plan options.

401(a) MONEY PURCHASE PLAN: County contribution of $50 per pay period towards choice between two 401(a) plan providers.

ANNUAL LEAVE (Bi-Weekly Accrual):

0 < 36 months = 8.92 Hours
36 to <108 months = 10.46 Hours
108 or more months = 12.00 Hours

Maximum Annual Leave accumulation is 1,800 hours. Employee may receive pay in lieu of up to 80 hours per calendar year. Agency/Department Head may approve an additional 80 hours.

-Annual Leave for Unrepresented Management Attorneys:
Maximum Annual Leave accumulation is 2,000 hours. Refer to Article 22 of the Management Resolution for a list of job classifications included.

HOLIDAYS: Normally 12 paid holidays per year.

BEREAVEMENT LEAVE: 5 days (3 days are County paid; 2 days can be taken through use of accrued leave balances).

BASIC LIFE INSURANCE: $50,000 of term life coverage. Premiums are paid by the County. Additional Supplemental Life plan is available for employee purchase.

LONG-TERM DISABILITY (LTD): Benefit pays 66.67% of earnings to a maximum of $10,000 per month; 30-day waiting period; pays to age 65. Benefit can be coordinated with other available leave balances to provide up to 100% of pay.

POST RETIREMENT MEDICAL CONTRIBUTION: A monthly contribution is made by the County towards retiree health insurance offered through the County as governed by the Management Resolution or applicable bargaining unit.

OTHER: There may be other benefit provisions as specified in the applicable Memorandum of Understanding, Management Resolution, or Salary Ordinance. Please contact the recruiter listed on the job posting directly for more information.
01

This position requires candidates to possess and maintain a current Certified Information Systems Security Professional (CISSP) certification issued by (ISC) . Please confirm whether you currently hold an active CISSP certification and can provide verification if selected.

• Yes, I currently possess and maintain a valid CISSP certification.
• No, I do not currently possess a CISSP certification.

02

Please provide the information below for (ISC) Certification Verification:1) Last Name on certification2) Certification number (CISSP ID)
03

How many years of progressively responsible experience in information security, including extensive experience and knowledge of Linux and Microsoft operating systems. This experience must include performing vulnerability scans and penetration tests; developing or maintaining scripts, routines, or tools used for vulnerability and threat assessments; coordinating disaster recovery and business continuity activities; conducting security design reviews and analyses; performing threat and risk assessments; and developing or evaluating plans, principles, and procedures to support security studies and provide professional analysis of methods and objectives.

• No experience
• Less than 1 year.
• 1 year or more, but less than 2 years.
• 2 years or more, but less than 3 years.
• 3 years or more, but less than 4 years.
• 4 years or more, but less than 5 years.
• 5 years or more, but less than 6 years
• 6 years or more,

Required Question