Job Description

Job Description and Duties

Protect California's Digital Landscape: Become a Cyber Threat Intelligence Analyst at the California Governor’s Office of Emergency Services.

From raging wildfires to the unprecedented COVID-19 pandemic, California has faced numerous emergencies that have impacted millions of lives. The need for skilled cybersecurity professionals has never been greater. At Cal OES, we are seeking driven individuals to join our team and help safeguard the state's critical infrastructure.

The California Cybersecurity Integration Center (Cal-CSIC) is at the forefront of this effort, serving as the hub of state government's cybersecurity operations. Our mission is to reduce the number of cybersecurity incidents that could potentially damage California's economy, critical infrastructure, and computer networks. As a Cyber Threat Intelligence Analyst within the Cal-CSIC, you will play a crucial role in achieving this goal.

In this role, you will use your sharp analytical expertise and technical proficiency to identify, assess, and mitigate cyber threats to our state infrastructure.

Key responsibilities include:

• Monitoring the cyber threat landscape for emerging risks and vulnerabilities relevant to our clients.
• Analyzing threat data from various sources to identify patterns and indicators of compromise affecting client systems.
• Producing detailed intelligence reports to inform clients' decision-making process.
• Working closely with clients and their security teams to develop proactive defense strategies.

To succeed in this position, you will need:

• Strong analytical skills and experience with threat intelligence tools.
• A solid background in information technology and cybersecurity.
• The ability to communicate effectively with diverse stakeholders.
• Very strong interpersonal skills and excellent oral and written communication skills.
• A deep commitment to safeguarding California's critical infrastructure while looking out for everyone who calls it home.

Joining us means working alongside dedicated professionals at the forefront of cybersecurity, while contributing to the greater good of the state. Apply now to be part of Cal OES's mission to protect Californians when it matters most.

This position is located at our Mather Campus and is eligible for a hybrid work schedule which may include up to two days of remote work per week. Additional in office days may be required based on the business need.

You will find additional information about the job in the .

Working Conditions

See duty statement for more information.

Special Requirements

DMV Pull Program : Participation in the DMV Pull Program is required. The position(s) require(s) a valid Driver’s License (DL). You must answer the questions addressing your DL on your application. Ensure you provide your DL number, class, expiration date, and any endorsements and/or restrictions.

Homeland Security Special Requirements : This position requires access to National Security Information, and therefore, selected candidates must be able to obtain and maintain a Secret-level security clearance. Upon hire, candidates will be required to apply for the clearance, and once granted, they must maintain it as a condition of employment. Eligibility for a Department of Homeland Security (DHS) sponsored SECRET security clearance is also mandatory, and candidates must be able to qualify for and maintain it. To obtain a security clearance, you must be a U.S. citizen.

Application Package Requirements

To have your application considered for this job opportunity:

• List the Job Code and Position Number for this position in the “EXAMINATION(S) OR JOB TITLE(S) FOR WHICH YOU ARE APPLYING” section on the State Application, STD. 678. 
• List your most current employment history first in the “EMPLOYMENT HISTORY” section on the STD. 678. 
• Provide the “From” and “To” dates with the month, day and year, the “Hours Per Week” that you worked and the Total Worked (Years/Months). You may include overtime hours.
• You must complete the “DUTIES PERFORMED” on the State Application ( do not note “see attached resume” in this section ). Failure to comply and your application is considered incomplete.
• SROA and Surplus are encouraged to apply and must submit a copy of their letter.
• Please note consideration shall be given to work experience gained in a part-time or full-time job, regardless of whether the job was a paid or a volunteer position or was within, or outside of, state service.

If using education to qualify please submit a copy of your transcripts. If selected, official transcripts will be required. Foreign education must obtain and submit verification of United States course/degree equivalency. 

NOTE: Incomplete applications received may not be considered. Resumes are welcomed but do not take the place of the completed State Application STD 678. Applications received via fax or email will NOT be accepted. If you would like confirmation of receipt, please send certified mail.  

**A candidate pool may be established for subsequent vacancies.**

**All hires may be subject to a criminal background check.**

**We encourage applicants to apply electronically.**

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

• Global Cyber Threat Intelligence (GCTI) certification, GIAC Information Security Fundamentals (GISF) certification, GIAC Security Essentials (GSEC) certification
• Active federal security clearance within last two-years
• Basic Intelligence Analyst Certification
• Ability to effectively communicate (both orally and written) with a diverse range of stakeholders, including government agencies, and community members
• Collaborative mindset and experience in working with partners
• Strong problem-solving, analytic, and interpersonal skills
• Ability to analyze complex situations, identify potential solutions, and make sound decisions
• Well organized and able to handle multiple assignments
• Willing to take the initiative and be innovative to achieve success
• Knowledge of emergency management principles and practices; ICS 300 completion
• Familiarity with the disaster management cycle (preparedness, response, recovery, and mitigation) and best practices for emergency management

Benefits

Cal OES employees are eligible for a number of benefits and working for us is a great opportunity to join a committed team. Benefits include but are not limited to:

• Free Parking
• On-site Gym and Locker room
• Electric Carport
• Excellent CalPERS state pension plan
• 401(k) and 457(b) Plans
• Flexible Schedules
• Generous paid time off
• Health, dental & vision insurance for the employee or the employee's family
• Investment in careers development
• Located near many local eateries, financial institutions, and the Light Rail Station

Benefit information can be found on the CalHR website and the CalPERS website.

Statement of Qualifications

All applicants must provide a Statement of Qualifications (SOQ) for the hiring manager’s review. Failure to include an SOQ may disqualify an applicant from consideration. 

A resume in lieu of the SOQ responses may disqualify an applicant from consideration. A standard or generic SOQ may disqualify an applicant from consideration. 

Please review the Duty Statement and Desirable Qualifications for this position.

SOQ Format Instructions

The SOQ should be no more than two pages, single-spaced in 11-point Arial font.

Please respond to each of the following prompts, providing detailed examples and explanations where appropriate:

1. Explain the importance of the analysis and production stage in the intelligence cycle. How do you ensure the accuracy and reliability of the intelligence you produce?
2. Describe your experience gathering and analyzing data to produce intelligence reports. Can you provide an example of a specific report you worked on and its impact?
3. Describe your experience integrating intelligence analysis within a cybersecurity framework. How have you used intelligence to identify, assess and mitigate cyber threats in previous roles?

Looking for guidance on navigating the state’s job board or need assistance with uploading your documents or SOQ? Check out helpful how-to-videos here:  to make your job search easier and more effective!

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• Statement of Qualifications - Please refer to the Statement of Qualifications (SOQ) section at the bottom of this job bulletin for the filing instructions and the SOQ Question(s). Applications submitted without the SOQ  may not  be considered.

Job Tags

Permanent employment, Full time, Part time, Work experience placement, Local area, Flexible hours,

Similar Jobs