SENIOR CYBERSECURITY OPERATIONS ANALYST (INFORMATION SECURITY)

Los Angeles County Metropolitan Transportation Authority (CA)
Los Angeles, CA

Apply Now

Job Details

$109,470.40 - $164,195.20 a year
1 day ago

Qualifications

Project management tools
Data integrity assurance
Authentication
Records maintenance
Operational analysis
Intrusion detection analysis
Defect resolution root cause analysis
Data analysis reporting
Incident management
PCI
Tooling
Technical documentation
ISO standards
Incident report management
Operations coordination
Reporting (security system operation)
Risk mitigation strategy development
Presentations for conferences or internal meetings
Privacy law
IT security awareness training implementation
HIPAA
UNIX
Performance Reporting
Vulnerability Remediation
English
Metrics Reporting
Research
Windows
Network infrastructure
Information security compliance

Full Job Description

JOB
Monitors, detects, and responds to security incidents and collaborates with various security, crisis and emergency management teams to ensure the safety of Metro’s digital and physical assets.

Recruitment Timelines: Interviews are projected to be scheduled for the week of August 10, 2026. These dates are subject to change. We encourage you to monitor your governmentjobs.com profile and emails for the latest updates. EXAMPLE OF DUTIES

Monitor cybersecurity events across assigned environment using advanced Security Information, Threat Intelligence, and Security Information and Event Management (SIEM) tools to detect and respond to security threats and incidents.
Identify, analyze, and respond to security incidents, coordinating with teams to contain, mitigate, and recover from such breaches.
Maintain awareness of local, national, and global threats and vulnerabilities and develop mitigation strategies to protect critical networks and assets.
Analyze security data to identify potential security incidents, conduct root cause analysis, and offer actionable recommendations to prevent future occurrences.
Identify and remediate vulnerabilities within assigned environments.
Collaborate with Information Security and Information Technology Services (ITS) teams to implement security patches and updates.
Maintain detailed and accurate records of security incidents, including timelines, actions taken, and outcomes.
Prepare and furnish reports for management and relevant stakeholders on Cyber Security Operations Center (CSOC) activities and incident response metrics.
Work closely with ITS, and other technical and security teams to ensure effective communication and coordination during security incidents.
Participate in cross-functional security initiatives and projects and take responsibility for associated tasks.
Address relevant maintenance and tuning of CSOC tools, including SIEM, IDS/IPS, firewalls, and other security technologies.
Address improvement plans to the development and enhancement of CSOC processes, playbooks, and procedures.
Identify areas for improvement in incident response and threat detection capabilities.

May be required to perform other related job duties

SUPPLEMENTAL INFORMATION
Knowledge of (defined as a learned body of information that is required for and applied in the performance of job tasks)

Information Technology/Operational Technology security challenges and agency-wide Cybersecurity requirements.
Cybersecurity frameworks (e.g., National Institute Standard Technology (NIST), International Organization for Standardization (ISO 27001)), Cybersecurity and Infrastructure Security Agency (CISA) and their application in Cybersecurity Operations Center environments.
Diverse IT infrastructure/security environments, with various IT systems, technologies, platforms, concepts, and applications.
Applicable local, state, and federal laws, rules, and regulations governing information systems for a public agency.
Statutory and regulatory requirements, standards, and ethics pertaining to information access, audit, investigation, security, and privacy, such as PCI-DSS (Payment Card Industry Data Security Standard), California S.B. 1386, California Privacy Rights Act (CPRA), and HIPAA (Health Insurance Portability and Accountability Act).
Theories, principles, and practices of management information systems and specified application areas Network operating systems such as Cisco Routing and Switching, Microsoft Windows, Linux/UNIX, Cloud services (SaaS, PaaS, IaaS) and other networks related to the area of assignment
Network architecture and design elements
Security and contingency planning concepts, including data integrity, authentication and authorization

Skill In (defined as the proficient manual, verbal, or mental utilization of data, people, or things)

Researching computer systems, assessing potential risks, and considering possible solutions
Analyzing situations, conducting research, defining problems, providing recommendations, and implementing solutions and alternatives based on network infrastructure
Analyzing and evaluating system changes to determine feasibility
Seeking out and updating knowledge on applicable systems, legislation, practices and techniques

Ability to (defined as a present competence to perform an observable behavior or produce an observable result)

Effectively communicate technical information, issues, and solutions to multiple organizational levels internally and externally in a clear and simple way
Educate users and explain the importance of cybersecurity and how to protect data
Interact professionally with various levels of Metro employees and outside representatives
Think strategically and turn ideas into actions
Work independently and deliver results
Prepare documentation, reports, and correspondence

Special Conditions

This job specification is not to be construed as an exhaustive list of duties, responsibilities, or requirements
The physical demands described are representative of those that must be met by the employee to successfully perform the essential functions of this job
Metro provides reasonable accommodation to enable individuals with disabilities to perform the essential functions
This classification is at-will and the incumbent serves at the pleasure of the hiring authority when classified as an Intermittent, Emergency, Annuitant, or Temporary employee, is assigned to the Office of Inspector General (OIG) or Board Clerk's Office, and/or reporting directly to the LACMTA Board of Directors

Working Conditions

Typical office situation
Close exposure to computer monitors and video screen
Work irregular hours, split shifts, weekends, holidays, or 24-hour-a-day on-call assignments
Work after designated regular hours in case of special assignments or emergencies

Physical Effort Required

Sitting at a desk or table
Operate a telephone or other telecommunications device and communicate through the medium
Type and use a keyboard and mouse to perform necessary computer-based functions
Standing
Walking
Good distance vision and/or depth perception to judge distances
Communicating through speech in the English language required

(TL)

Apply Now

Job Seeker Tools

Employer Tools

Browse

Stay Connected