Security Specialist

Under the direction of the Security Operations Manager, an Information Technology (IT) Manager I, Information Technology Specialist I (Security Specialist) serves as a technical specialist within the Authority's Information Security Program, focusing on the development, documentation, and maintenance of information security policies, standards, and procedures; configuration management; and reporting. The incumbent supports compliance with statewide and federal requirements, ensures consistency across IT and business units, and contributes to the Authority's mission by strengthening information security governance and risk management practices.

This advertisement is posted as Open Until Filled and the advertisement will remain open until the vacancy is filled. Cut-offs for applications will be every other Friday, starting February 27, 2026, and applications will be reviewed per those cut-off dates. Hires can be made at any time based on the applications received by the cut-off dates.

You will find additional information about the job in the Duty Statement .

Working Conditions
Part-time telework is available for this position for California residents based on the requirements of the position and may be discussed during the interview process. Hiring interviews may be available virtually, using teleconferencing or video conferencing options.

While working on-site, the incumbent works in a professional office environment, in a climate-controlled area which may fluctuate in temperature and is under artificial light. The incumbent will be required to use a computer, mouse, and keyboard, and will be required to sit for long periods of time at a computer screen. The incumbent must be able to focus for long periods of time, multi-task, adapt to changes in priorities, and complete tasks or projects with short notice. The incumbent must develop and maintain cooperative working relationships and display professionalism and respect for others in all contact opportunities.

Minimum Requirements You will find the Minimum Requirements in the Class Specification.

• INFORMATION TECHNOLOGY SPECIALIST I

Additional Documents

• Job Application Package Checklist
• Duty Statement

Position Details Job Code #:
JC-504006

Position #(s):
311-420-1402-001

Working Title:
Security Specialist

Classification:
INFORMATION TECHNOLOGY SPECIALIST I $6,513.00 - $8,729.00 A
$7,163.00 - $9,599.00 B
$7,864.00 - $10,537.00 C
New to State candidates will be hired into the minimum salary of the classification or minimum of alternate range when applicable.

# of Positions:
1

Work Location:
Sacramento County

Telework:
Hybrid

Job Type:
Permanent, Full Time

Department Information Are you looking for a different type of state government job? Something with a little more excitement and a more fast-paced and fluid environment? How about an opportunity to be part of one of the most remarkable transportation projects in California's history? The California High-Speed Rail Authority is a small and dynamic state agency that is looking for employees who are interested in a challenging and rewarding job opportunity.

Please let us know how you heard about our position by taking this brief survey. Completing this survey is not required to be considered for this vacancy.

https://www.surveymonkey.com/r/HCM6SCC

Effective July 1, 2025, state employees are subject to temporary salary reductions in exchange for Personal Leave Program (PLP) accruals.
For additional information please visit https://hrmanual.calhr.ca.gov/Home/ManualItem/1/2113.

Department Website: https://hsr.ca.gov/jobs/

Special Requirements
A Statement of Qualifications (SOQ) is required for this position. The SOQ must be no more than two (2) pages, single-spaced, with one-inch margins, in 12-point font, organized and numbered as reflected below. The SOQ must discuss the applicant's applicable experience as it pertains to each item below. Applicants who do not follow these requirements may be disqualified from the hiring process. A resume is required but does not take the place of the SOQ. Cover letters and other materials will not be considered in the place of the SOQ.

You must respond to all the following items:

1. Describe and provide examples from your experience of developing and maintaining IT or information security documents, such as policies, procedures, configuration guides, or security baselines. Include how you determined the content and layout of the document, its intent, and how you ensured it was kept up to date.

2. Describe your experience and provide an example of a baseline configuration you developed. How did you ensure compliance with information security policies, standards, and frameworks such as SAM, SIMM, NIST SP 800-53/171, CIS Benchmarks, DISA STIGs etc.?

3. Provide an example of when you assisted with or prepared documentation for an audit, assessment, or compliance review. Describe the purpose/intent of the audit, assessment, or review; your role; and how your work contributed to the outcome.

4. Provide an example of a time you had to work with non-technical staff/users/management to gain their concurrence/compliance with a change or procedure that was necessary due to a technical or security issue.

NOTE: Artificial intelligence (AI) tools such as ChatGPT, website searches, and third-party reviewers can be helpful in researching responses to the SOQ; however, by submitting your application for this position, you understand and acknowledge the SOQ you submit is your own work, in your own words, and accurately reflects your knowledge, skills, abilities, and experiences. Submitting an SOQ that is not your own may be cause for disqualification from the hiring process.

Application Instructions
Dates printed on Mobile Bar Codes, such as the Quick Response (QR) Codes available at the USPS, are not considered Postmark dates for the purpose of determining timely filing of an application.
Final Filing Date: Until Filled
Who May Apply
Individuals who are currently in the classification, eligible for lateral transfer, eligible for reinstatement, have list or LEAP eligibility, are in the process of obtaining list eligibility, or have SROA and/or Surplus eligibility (please attach your letter, if available). SROA and Surplus candidates are given priority; therefore, individuals with other eligibility may be considered in the event no SROA or Surplus candidates apply.

Applications will be screened and only the most qualified applicants will be selected to move forward in the selection process. Applicants must meet the Minimum Qualifications stated in the Classification Specification(s).

How To Apply
Complete Application Packages (including your Examination/Employment Application (STD 678) and applicable or required documents) must be submitted to apply for this Job Posting. Application Packages may be submitted electronically through your CalCareer Account at www.CalCareers.ca.gov. When submitting your application in hard copy, a completed copy of the Application Package listing must be included. If you choose to not apply electronically, a hard copy application package may be submitted through an alternative method listed below:

Address for Mailing Application Packages

You may submit your application and any applicable or required documents to:

CA High Speed Rail Authority
High Speed Rail Authority
Attn: Human Resources
770 L Street, Suite 620, MS 4

Sacramento , CA 95814

Address for Drop-Off Application Packages

You may drop off your application and any applicable or required documents at:

CA High Speed Rail Authority
High Speed Rail Authority
Human Resources
770 L Street, Suite 620, MS 4

Sacramento , CA 95814

08:00 AM - 05:00 PM

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at www.CalCareers.ca.gov. All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is optional. It may be included, but is not required.
• Statement of Qualifications - A Statement of Qualifications (SOQ) is required to apply. Please see above "Special Requirements" section for SOQ instructions.

Applicants requiring reasonable accommodations for the hiring interview process must request the necessary accommodations if scheduled for a hiring interview. The request should be made at the time of contact to schedule the interview. Questions regarding reasonable accommodations may be directed to the EEO contact listed on this job posting.

Desirable Qualifications In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

• Associate or bachelor's degree in an information technology related field of study.
• 1 years of related experience in information security or equivalent combination of education and experience.
• Possession of the one of the following active certifications is desirable:
• CompTIA Security+
• CompTIA Cybersecurity Analyst+ (CySA+)
• Certified Cloud Security Professional (CCSP)
• Certified Information Security Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• GIAC Continuous Monitoring Certification (GMON)
• Microsoft Security Operations Analyst
• AWS/Azure Security Engineer Associate
• Strong technical writing skills with the ability to produce security baselines, configuration guides, and system documentation.
• Experience with system hardening and compliance frameworks such as CIS Benchmarks, DISA STIGs, and NIST SP 800-53/171.
• Familiarity with enterprise IT environments including Windows Server, Linus, Active Directory, databases, and cloud platforms (Azure, AWS, M365).
• Hands-on experience with information security tools such as SIEMs, vulnerability scanners (e.g. Tenable, Qualys), EDR platforms, and log management solutions.
• Knowledge of security devices such as network firewalls, web application firewalls, web content filters, and intrusion prevention/detection systems.
• Knowledge of networking concepts and practices.
• Understanding of scripting or automation (e.g. PowerShell, Python, or Bash) to assist with policy enforcement and evidence gathering.
• Experience authoring security policies, procedures, and other reference materials.
• Ability to adapt quickly to new tools, platforms, and security frameworks as technology and compliance requirements evolve.
• Ability to establish and maintain cooperative working relationships with all levels of staff and management; communicate effectively with peers, other technical teams, external partners, vendors, and others.
• Ability to manage multiple high priority initiatives in a fast-paced achievement-oriented environment and work under pressure to meet deadlines.
• Ability to maintain confidentiality of sensitive tasks, assignments, and information.
• Willingness to work excess hours to achieve business results.
• Display enthusiasm for continuous learning.

Benefits The State of California offers a comprehensive benefits package that includes health, vision, dental, a retirement pension, a telework stipend if applicable, and an array of other options.

Benefit information can be found on the CalHR website and the CalPERS website.

Contact Information
The Human Resources Contact is available to answer questions regarding the position or application process.
Department Website: https://hsr.ca.gov/jobs/
Human Resources Contact:
Human Resources
(916) 669-6606
recruitment@hsr.ca.gov

Please direct requests for Reasonable Accommodations to the interview scheduler at the time the interview is being scheduled. You may direct any additional questions regarding Reasonable Accommodations or Equal Employment Opportunity for this position(s) to the Department's EEO Office.
EEO Contact:
EEO Office
(916) 324-1541
eeo@hsr.ca.gov
California Relay Service: 1-800-735-2929 (TTY), 1-800-735-2922 (Voice) TTY is a Telecommunications Device for the Deaf, and is reachable only from phones equipped with a TTY Device.

Application Information
The STD. 678 is required, and each section must be filled out completely and thoroughly. Please do not include your Social Security Number, date of birth, veteran status, personal photos, LEAP information, or any other personally identifying information on any documents in your application package.

Using the online application system as specified in the announcement is the preferred method of applying for civil service job opportunities; however, applicants may instead apply by way of U.S. mail, parcel delivery or courier service, or in person, as set forth in this announcement. Dates printed on envelopes by mobile barcodes or equivalent mobile print technology are not acceptable proof of the date the application and any other required documents or materials were filed.

If applying via postal mail or by dropping off your application, applicants must include JC-504006 and Security Specialist, 311-420-1402-001 in the 'Job Title' section of the STD. 678 to be considered for this position. Please indicate on the STD 678 your basis of eligibility in the "Explanations" field (i.e. SROA, surplus, reemployment, reinstatement, transfer, or list eligible.)

Surplus/SROA candidates must provide a copy of their surplus/SROA letter with their application. Consideration may be given to applicants on another Department's employment list, provided the criteria are met to transfer the eligibility from the employment list to the Authority's employment list. Training and Development assignments are not being considered at this time.

NOTE: To be considered for this job opportunity, applicants must be reachable on an employment list, have transfer eligibility, or have reinstatement eligibility. If you are new to California State service and you do not have list eligibility, you must take the exam for this classification. To gain employment list eligibility, please click here to access the exam bulletin.

Location
The High-Speed Rail Authority headquarters building is located in downtown Sacramento on the corner of 8th and L Street. We are located one block away from the 8th and Capitol light rail stop, as well as the 7th and Capitol light rail stop. The building is also within walking distance of DOCO, the California State Capitol Park, a farmer's market during summer months, and Old Sacramento.

Equal Opportunity Employer
The State of California is an equal opportunity employer to all, regardless of age, ancestry, color, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding and related medical conditions), and sexual orientation.

It is an objective of the State of California to achieve a drug-free work place. Any applicant for state employment will be expected to behave in accordance with this objective because the use of illegal drugs is inconsistent with the law of the State, the rules governing Civil Service, and the special trust placed in public servants.