Security & Training Specialist SJCOG

Comtech seeks a Security & Training Specialist to support SJCOG s Managed IT Services program. This role will implement and operate endpoint protection, vulnerability scanning, coordinate penetration testing, lead incident response activities, and design and deliver security awareness training for SJCOG staff. The Specialist will work closely with the IT Service Manager/vCIO, Network & Systems Engineer, and Service Desk Manager to remediate findings, harden systems, and maintain audit-ready documentation aligned to NIST, ISO 27001, and CIS Controls. Duties include running quarterly vulnerability scans, coordinating annual penetration tests, validating and triaging live alerts from monitoring systems, conducting phishing simulations and security training, and participating in catastrophic recovery and incident response exercises. Services must be performed by vendor employees (no subcontractors) and comply with contract insurance and reporting requirements.

Key Responsibilities:

• Implement, manage, and tune endpoint protection (anti-malware, EDR) across Windows and macOS devices; validate coverage and respond to endpoint detections
• Plan, execute, and report on vulnerability management: schedule and run scans at least quarterly, triage vulnerabilities, prioritize remediation, and track closure.
• Coordinate and support annual penetration testing (and any after-major-change tests): act as vendor liaison, ensure scope matches critical assets, and oversee remediation tracking.
• Lead incident response activities: participate in on-call rotations for security incidents, perform containment/eradication/recovery tasks, maintain incident logs, and conduct post-incident reviews and improvements.
• Design and deliver security awareness programs: phishing simulations, role-based training, onboarding security briefings, and periodic re trainings; measure training effectiveness and report metrics.
• Integrate security monitoring and live-alert triage into the SOC/monitoring workflow; validate alerts, escalate high-impact issues, and produce remediation playbooks/runbooks.
• Assist with M365 security posture and M365 SaaS backup validation; work with administrators to ensure secure configurations and recovery readiness.
• Maintain audit-ready documentation: policies, procedures, training records, remediation logs, and evidence supporting compliance with NIST CSF, ISO 27001, CIS Controls, and applicable privacy laws (CCPA/HIPAA where relevant).
• Participate in tabletop and live DR tests tied to the Catastrophic Recovery & Management Plan; help define RTO/RPO for security-sensitive systems.
• Provide monthly security metrics and narrative in the Managed Services reports; recommend improvements and roadmap items to reduce organizational risk.