IT Security Analyst III

Salary : $108,513.28 - $176,869.88 Annually
Location : Riverside
Job Type: Regular
Job Number: 26-77270-01
Department: District Attorney
Division: District Attorney
Opening Date: 10/28/2026
Closing Date: 11/9/2026 11:59 PM Pacific

ABOUT THE POSITION
The Riverside County District Attorney' s Office is seeking an experienced Information Security Analyst III (ISA III) in Riverside. The ISA III will serve as a senior-level security professional focused primarily on security monitoring, governance, and incident response with some emphasis on programming or tool development. This role supports the DA's Office security posture by implementing and maintaining security policies and standards, overseeing security compliance, and participating in enterprise risk and governance efforts. The analyst will conduct advanced monitoring of intrusion detection systems, firewall logs, and system activity to identify threats and coordinate mitigation responses.

The incumbent will also play a critical role in emergency preparedness and operational resilience by developing and maintaining Emergency Operations Plans, supporting disaster recovery and business continuity activities, and maintaining inventory tracking methodologies for critical assets. This role participates in the security incident response team, evaluates security events, and provides recommendations to management.

Additional responsibilities include performing vulnerability assessments and penetration testing, conducting forensic investigations while preserving evidence integrity, and collaborating with internal departments to ensure secure system designs and adherence to enterprise security architecture. This position requires strong analytical ability, sound judgment, and expertise in monitoring, governance, and investigative practices rather than programming or systems development.

Experience with Security Information and Event Management (SIEM) systems is highly desired. Candidates should have hands-on experience working with SIEM platforms, including tuning alerts, reviewing correlation logic, and triaging SIEM-generated events. Knowledge of log ingestion best practices is also preferred, though only minimal scripting is needed for this role.

EXAMPLES OF ESSENTIAL DUTIES
• Implement and maintain global security policies, standards, guidelines, and procedures to ensure ongoing security compliance; recommend security improvements; ensure that technology decisions made are compliant with Enterprise Security Architecture.
• Develop, analyze and maintain Emergency Operations Plans; research, develop, document and implement tracking and inventory methodologies for maintaining inventory of critical assets.
• Perform vulnerability scans and penetration tests; develop and maintain scripts, routines, and software to perform vulnerability threat assessments; coordinate County disaster recovery and business continuity tasks.
• Participate as a member of the security incident response team; evaluate security incidents, developing solutions and communicating results to management.
• Manage a computer crime or incident scene, including recognition of the proper investigative approach, conducting a field of search to establish probable cause for seizure, proper collection methods, evidence preservation, transportation, computer forensic analysis, and case management; use various security tools and prepare reports on findings.
• Monitor and review intrusion detection systems and firewall logs, analyzing events and patterns and coordinating mitigation responses; review firewall and router rules and access control lists; research technical and security topics and maintain information on industry trends; review and analyze system logs and access lists.
• Perform design review and analysis; perform threat and risk analysis; develop and evaluate plans, principles, and procedures for accomplishing customer security studies and provide professional analysis of methods and objectives.
• Develop and analyze information security models, maintaining methodology to track Security Plans for each sensitive and critical application and general support system within the organizations.
• Respond to and assist in information security assessment requests; evaluate vendor products and services; advise management of risks and best security practices.
• Coordinate implementation and modification of enterprise and departmental DMZ's; perform design review and analysis; collaborate on security solutions with departments.

MINIMUM QUALIFICATIONS
Education: Successful completion of the education required to possess and maintain current certification within guidelines established by the International Information Systems Security Certification Consortium, Inc. or (ISC)² as a Certified Information Systems Security Professional (CISSP).

Experience: Five years of progressively responsible experience in information security, including extensive experience and knowledge of Linux and Microsoft operating systems. This experience must include performing vulnerability scans and penetration tests; developing or maintaining scripts, routines, or tools used for vulnerability and threat assessments; coordinating disaster recovery and business continuity activities; conducting security design reviews and analyses; performing threat and risk assessments; and developing or evaluating plans, principles, and procedures to support security studies and provide professional analysis of methods and objectives.. Military or law enforcement experience is desired.

Knowledge of: Standard security practices; network architecture, routing, and TCP/IP protocols; Linux and Microsoft operating systems; project planning and management; use of third-party applications and native scripts and languages; risk assessment process and practices; general business processes and standards associated with areas of assignment.

Ability to: Perform cyber-attack trend analysis; project planning and management; conduct independent systems analysis of complex business processes; manage evidentiary process; maintain the chain-of-custody process and procedures; conduct investigations and coordinate security anomalies and events; interact with customers and vendors on the phone and in person; perform business continuity planning, documentation and evaluation; establish and maintain excellent customer service and relationships.
Other Requirements
Background: A successful Security Clearance conducted by the DA is required for positions within the Riverside County Office of the District Attorney.
License/Certificate: Must possess and maintain current certification within guidelines established by the International Information Systems Security Certification Consortium, Inc., or (ISC)² as a Certified Information Systems Security Professional (CISSP) by (ISC)².

Possession of a valid California Driver's License may be required.

SUPPLEMENTAL INFORMATION

This position is in office in Riverside.

General Information
If you have any questions regarding this posting, please contact Angie Tavaglione at or (951) 955-3523. Please allow 1-2 business days for a response to general inquiries.
APPLICATION INFORMATION

Veteran's Preference
The County has a Veterans Preference Policy applicable to new hires. To qualify, attach the required documents to your job application. Documents include a copy of your (or your spouse's) Member-4 Form DD-214 indicating dates of service. For spousal preference, and as applicable, the following documents: a copy of your marriage certificate, spouse's death certificate, a letter of spouse's disability and/or letter of service-related death (if available) from the U.S. Veteran's Administration. For privacy reasons, it is recommended that you remove your social security information from the document(s). A Human Resources Representative will review the materials and determine if you qualify for veterans' preference. For complete details and documentation requirements, please review the Veterans Preference Policy, C-3 here:
Reasonable Accommodations
The County of Riverside is committed to providing reasonable accommodation to applicants as required by the Americans with Disabilities Act (ADA) and Fair Employment and Housing Act (FEHA). Qualified individuals with disabilities who need a reasonable accommodation during the application or selection process should contact the recruiter for the position noted above. For additional information and/or to obtain the appropriate form for requesting a reasonable accommodation, please visit the Disability Access Office web page located at:
Schedule, Overtime, Standby/On-Call, and Travel Obligations
The County of Riverside offers a variety of alternative work schedules, dependent upon department operations and needs. Certain assignments may involve overtime, standby/on-call shifts, and/or travel; however, scheduling, shift assignments, overtime work, standby/on-call duty, and travel obligations are subject to management approval, operational needs, and/or may be modified or discontinued at any time. Applicants should contact the assigned recruiter for additional information regarding the schedule, overtime and standby/on-call expectations, and travel obligations.
Proof of Education
If using education to qualify or when requested by the recruiter, upload a copy of any license(s), official/unofficial transcript(s), degrees, and/or related employment documents to your NeoGov account at the time of application and before the closing date. Official or unofficial transcripts will be accepted.

If your education was completed outside of the United States, you will need to provide a copy of your Foreign Education Equivalency evaluation from a member of the National Association of Credential Evaluation Services () or Association of International Credential Evaluators, Inc. ().
Work Authorization Requirement
Applicants must be legally authorized to work in the United States at the time of application. The County of Riverside does not participate in visa sponsorship programs, including H1-B visas, and will not provide sponsorship for any employment-based visas.
BENEFIT PROGRAM: MCU
MEDICAL/DENTAL INSURANCE: A Flexible Benefit Credit is provided on a monthly basis as governed by the Management Resolution or applicable bargaining unit. Vision coverage is provided through Vision Service Plan (VSP) at no cost to employee or eligible dependents.

Note: Employees on assignment through the Temporary Assignment Program (TAP) receive different benefits. See the list
MISCELLANEOUS RETIREMENT: County of Riverside has three retirement Tiers through the California Public Employees' Retirement System (CalPERS).

• Tier I (Classic Member - Formula 3% @ 60): Applicable to current and former County of Riverside local miscellaneous employees hired