IT Professional 4 Information Security (Soc Manager)

***THIS RECRUITMENT MAY CLOSE WITHOUT FURTHER NOTICE DEPENDING ON THE NUMBER OF APPLICATIONS RECEIVED. APPLICANTS ARE ENCOURAGED TO APPLY AS SOON AS POSSIBLE***

Information Technology (IT) Professionals analyze develop implement maintain and modify computer operations systems networks databases applications and/or information security. Incumbents may perform duties in one or more IT specialization areas depending on the needs of the agency.

Bachelors degree from an accredited college or university in computer science management information systems or closely related field and five years of professional IT experience relevant to the duties of the position which may include systems administration network administration database administration applications analysis and development and/or information security two years of which were at the advanced journey level or in a supervisory or project management capacity; OR Bachelors degree from an accredited college or university in computer science management information systems or closely related field and five years of professional IT experience which may include systems administration network administration database administration applications analysis and development and/or information security relevant to the duties of the position two years of which were at the journey level in information security; OR two years of relevant experience as an IT Professional III in Nevada State service; OR an equivalent combination of education and experience as described above.

This is a supervisory position located in Carson City or Las Vegas areas within the Governors Technology Office Office of Information Security and Cyber Defense. The incumbent serves as the Security Operations Center (SOC) Manager and leads the States security operations center operations oversee daily threat monitoring direct incident response efforts and oversee the interactions with the states SOC MSSP. You will manage a team of analysts develop operational playbooks and ensure our security infrastructure protects critical organizational assets. The incumbent will recruit train mentor and evaluate SOC analysts; manage staffing scheduling and performance. This position will serve as the primary Incident Commander during major security crises orchestrating the full lifecycle of response from detection to recovery. Incumbents must be capable of developing and maintaining incident response playbooks Standard Operating Procedures (SOPs) and overarching security strategies. The incumbent must also work diligently with the rest of the security team to enforce state and agency security policies as well as work with other unit managers to develop policies that abide by state standards as well as industry best practices. Incumbents will be required to direct daily activities manage SOC tools (SIEM SOAR IDS/IPS) oversee alert triage ensure service level adherence utilize threat intelligence conduct proactive threat hunting and analyze vulnerabilities. Incumbents are responsible for overseeing the security stack including SIEM (for example Splunk Microsoft Sentinel) EDR/XDR (Microsoft Defender CrowdStrike) and SOAR automation tools. This oversight also includes the automation and tuning of telemetry to ensure that the SIEM/SOC are receiving the appropriate telemetry. This position will also provide regular reports to the CISO or other executives on the organizations security posture and key performance indicators (KPIs) like Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).

This job specification lists the major knowledge skills and abilities of the job and is not all inclusive. Incumbent(s) will be expected to have knowledge skills and abilities from a previous level.

Information Security:
Working knowledge of:current principles theories practices and procedures related to information security management; five of the ten information security domains; general-purpose security controls; current information security trends and technologies; strategic planning and project management at the division/work unit level; policy development and implementation; methods and techniques used to safeguard against accidental or unauthorized modification destruction or disclosure of data to meet security needs; interagency business practices and principles.

Ability to: identify complex information security risks vulnerabilities and problems; select the best course of mitigation actions for security issues; assess the security and/or vulnerability of information assets to assist in developing a risk assessment of multiple security domains; assess costs and present alternatives for the assigned area of responsibility; analyze data solve problems and make appropriate decisions within five of the ten domains; design appropriate solutions to complex security problems.

RECRUITER CONTACT INFORMATION: Jon Terrazas at

The State of Nevada is an equal opportunity employer dedicated to building diverse inclusive and innovative work environments with employees who reflect our communities and enthusiastically serve them. All applicants are considered without regard to race color national origin religion or belief age disability sex sexual orientation gender identity or expression pregnancy domestic partnership genetic information (GINA) or compensation and/or wages.

Please send direct Inquiries or correspondence to the recruiter listed on this announcement.