Cybersecurity Solutions Manager

About the Role

The California Cybersecurity Integration Center (Cal-CSIC) works to reduce the likelihood and severity of cyber threats and attacks across the state by enhancing coordination, information sharing, and incident response among public and private partners. Within Cal-CSIC, the Mission Support Branch (MSB) provides the internal technology and administrative backbone that enables this mission, including cyber policy and strategy development, knowledge management, vendor and product support, partner onboarding, IT and system engineering, IT project management, and metrics collection and governance.

The Cybersecurity Solutions Manager (IT Manager I) provides leadership and oversight for technical strategies and solutions across multiple domains, with emphasis on Business Technology Management, System Engineering, and Software Engineering. This role helps shape the technology, tools, and partnerships that support Cal-CSIC’s mission and enhance the state’s cyber resilience.

Responsibilities

• Plans, organizes, and directs the development, implementation, maintenance, and support of technology solutions and operational processes that advance the State’s cybersecurity mission.
• Manages projects and provides technical and operational oversight for engineering, development, and operations teams supporting Cal-CSIC cybersecurity tools and services.
• Oversees the delivery of technical and product support to Cyber Operations and Cyber Threat Intelligence teams and activities, strengthening California’s cyber risk awareness, reporting, and response capabilities.

Qualifications

• CompTIA Security+, GIAC Security Essentials, or similar certification.
• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
• Knowledge of project management frameworks and best practices.
• Knowledge of cybersecurity and privacy principles.
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of specific operational impacts of cybersecurity lapses.
• Knowledge of information technology supply chain security and supply chain risk management policies, requirements, and procedures.
• Knowledge of Cloud-based knowledge management technologies and concepts related to security, governance, procurement, and administration.
• Knowledge of Import/Export Regulations related to cryptography and other security technologies.
• Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).
• Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], ITIL).
• Skill in identifying measures or indicators of system performance and the actions needed to improve or correct performance, relative to the goals of the system.
• Skill in executing the system development life cycle (SDLC) management principles, including software security and usability.
• Skill in developing and applying security system access controls.
• Skill in discerning the protection needs (e.g., security controls) of information systems and networks.
• Skill in evaluating the adequacy of security designs.
• Skill in writing code in a currently supported programming language (e.g., Java, C++).
• Skill in conducting audits or reviews of technical systems.
• Skill in network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• Skill in integrating and applying policies that meet system security objectives.
• Skill in creating policies that enable systems to meet performance objectives (e.g., traffic routing, SLAs, CPU specifications).
• Skill in the use of design modeling (e.g., unified modeling language).
• Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Ability to ensure information system security, acquisition personnel, legal counsel, and other appropriate advisors and stakeholders are participating in decision making from system concept definition/review and are involved in, or approve of, each milestone decision through the entire system life cycle for systems.
• Ability to identify critical infrastructure systems with information communication technology that were designed without system security considerations.

Schedule

This position is located at the Mather Campus and is eligible for a hybrid work schedule, which includes up to one day of remote work per week. Additional in-office days may be required based on business need. In the event of an emergency, employees may be contacted and requested to report to work outside of normal working hours (evenings/nights, weekends, and holidays). This service may require irregular work hours, alternative work locations, and duties other than those specified in the official position description. Travel requirements in support of emergency operations may be extensive (weeks to months), with little advance notice, and relocation to emergency sites may be required.

Benefits

• Free parking
• On-site gym and locker room
• Electric carport
• Excellent CalPERS state pension plan
• 401(k) and 457(b) plans
• Flexible schedules
• Generous paid time off
• Health, dental, and vision insurance for the employee or the employee’s family
• Investment in career development
• Located near many local eateries, financial institutions, and the Light Rail Station

Benefit information can be found on the CalHR website and the CalPERS website.