Description

APPLY ONLINE TODAY!
Visit: Cucamonga Valley Water District Career Portal.

Applications must be submitted through the Cucamonga Valley Water District Career Portal. Emailed applications will not be considered.

FILING DEADLINE 

This recruitment is open until a sufficient number of applications are received.  Candidates are highly encouraged to apply early. The first review of applications will take place on Thursday, July 30, 2026.

PLEASE NOTE THAT THIS RECRUITMENT MAY CLOSE AT ANY TIME WITHOUT PRIOR NOTICE. 

JOB DESCRIPTION 

Class specifications are intended to present a descriptive list of the range of duties performed by employees in the class.  Specifications are not intended to reflect all duties performed within the job.

DEFINITION

To perform a wide variety of specialized professional support duties for the Information Technology Division of the Finance and Technology Services Department, including but not limited to leading, coordinating, and participating in the analysis, design, and implementation of IT security best practices; solutions for Supervisory Control and Data (SCADA), servers, desktops, and cloud infrastructure; develops compliance strategies for IT security programs; leads the assessment of risks of non-compliance to management policies, procedures, standards, and guidelines and reports findings to management; oversees, reviews, analyzes, and coordinates security upgrades and vulnerability management program; provides expert technical systems and infrastructure security advice, recommendations, and assistance in the development or implementation of risk-based mitigation plans.

DISTINGUISHING CHARACTERISTICS

The Lead IT Security Specialist is an experienced, advanced journey-level professional. Incumbents in this class are distinguished from the Information Technology Specialist II by performing the full range of duties assigned. At this level, incumbents perform more complex, specialized work while exercising broader discretion and independent judgment within established guidelines. Emphasis is on leads and participating in the technical analysis and correlation of security data/logs to identify potential threats and vulnerabilities or to determine the root cause of a security-related event/incident; researches evaluates, implements and recommends security tools, products, platforms, and standards based on industry trends, business requirements, and technical infrastructure; monitors, analyzes, and responds to security event using security-event management tools; maintains awareness and knowledge of current changes within legal, and Disaster Recovery plan activities and may act on his/her behalf in his/her absence if appointed.

SUPERVISION RECEIVED, AND EXERCISED.

Direct supervision is received from the Information Technology Manager.

ESSENTIAL AND MARGINAL FUNCTION STATEMENTS

Essential and other important responsibilities and duties may include, but are not limited to, the following:

Essential Functions:

1. Ability to communicate and present security risk concisely and effectively (written, oral, and presentation).
2. Demonstrated leadership and problem-solving skills.
3. Ability to manage effectively and work closely with business leaders in a high-pressure, fast-paced, highly collaborative environment with multiple deadlines and competing priorities.
4. Proven knowledge of security architecture design, network security, vulnerability management, and threat intelligence analysis.
5. Administer system backup and restore, ensuring data integrity for recovery.
6. Perform systems support functions for servers and network equipment operating in a LAN/WAN environment.
7. Experience in security, operations, control assessment, risk management, auditing, and/or internal controls.
8. Experience with security and privacy, legal, and regulatory requirements.
9. Knowledge of common information security management frameworks, such as NIST, CIS, ISO 27001, COBIT, or PCI DSS.
10. Experience performing information security risk assessments and risk analysis.
11. Strong understanding of encryption, security certificates, and advanced authentication measures.
12. Strong understanding of networking concepts and protocols (e.g., TCP/IP, LAN, WAN, DHCP, DNS, routing protocols).
13. Expert-level knowledge of security systems such as SIEM, IPS, firewalls, and related network security tools.
14. Experience with Windows, Unix, Apple, SQL, Azure, and Oracle databases.
15.  Experience with Industrial Control Systems software, including Siemens, Wonderware, and similar platforms.
16. The ability to support and handle urgent issues after hours.
17. District employees are expected to work overtime, weekends, evenings, and holidays as required to accommodate the District's needs, in addition to serving as Disaster Emergency Service Workers.

Marginal Functions:

1. Perform related duties and responsibilities as required.
2. Support vendors in the maintenance of WAN circuits.
3. Participate in setting direction for the Information Technology Division.
4. May be designated to act on behalf of the Information Technology Manager in their absence.
5. Participate in strategic planning and reporting on budget, disaster planning, and master planning.
6. Perform maintenance and support of firewalls, routers, and other network equipment, and work with external vendors to support these devices.
7. Requests for Quotes (RFQ) and Statements of Work (SOW) standard procedures.
8. Performs security assessment/penetration testing for SCADA, infrastructure, applications, databases, and cloud computing.
9. May be required to participate in the Countywide Cybersecurity Emergency Response Team, Departmental Cybersecurity Emergency Response Team, and Cybersecurity Workgroups.
10. May supervise IT staff in the performance of security-related assignments.
11. May be required to represent the department in legal matters related to IT systems security.

Requirements

KNOWLEDGE, SKILLS, AND ABILITIES 

Knowledge of: 

• Extensive expertise in personal computer hardware and software, combined with a strong understanding of the fundamental principles of data processing systems.
• Operation and use of operating systems using District-standard software.
• Word processing, spelling, punctuation, and grammar skills using District-standard software. 
• Database and spreadsheet principles using District-standard software.
• Application analysis, design, programming, testing, and debugging. Computer hardware platforms, operating systems, and middleware systems.
• Information Security Principles.
• Principles of customer support and service.
• Principles and practices of technical problem-solving.
• Testing standards and procedures.
• Principles and practices of project management, work planning, and status reporting.
• Business processes, operating practices, and the organizational structure of a public-sector agency.
• Principles and techniques of application, systems analysis, and design.

Ability to:

• Analyze and resolve application problems, and integrate software and hardware.
• Apply technology to provide business solutions.
• Work effectively with clients, peers, and support teams to ensure tasks are completed accurately and on time.
• Communicate effectively both orally and in writing.
• Evaluate and select hardware and software and work effectively with vendors to integrate solutions.
• Analyze and resolve complex problems, including applications and software integrations.
• Work effectively with peers and support teams to define business requirements, support software, hardware, and applications, and ensure tasks are completed accurately and in a timely manner.
• Design systems that meet defined requirements and document system design for development, implementation, testing, and client use.
• Research potential solutions, make implementation recommendations, and apply technology to provide business solutions.
• Develop solutions and recommend technology to provide target business outcomes.
• Establish and maintain effective working relationships with those contracted during the course of the work and project.
• Maintain an alert mental capacity that allows the capability of making sound judgments and decisions and demonstrating intellectual capabilities.
• Maintain physical condition appropriate to the performance of assigned duties and responsibilities.
• Maintain effective audio-visual discrimination and perception needed for making observations, communicating with others, reading, writing, and operating assigned equipment.

REQUIRED QUALIFICATIONS

Any combination of experience and training that would likely provide the required knowledge and abilities is qualifying. A typical way to obtain the knowledge, skills, and abilities would be:

Experience

• Five (5) years of progressive experience operating personal computer operating systems, word-processing and spreadsheet software; database application design and development; installing and maintaining personal computer hardware and software; and programming and systems analysis experience; installing and troubleshooting networks, Windows server operating systems, Microsoft Exchange/365, Active Directory, and networked equipment, including fiber optics.
• Five (5) years of experience administrating, configuring, maintaining, and upgrading LAN/WAN hardware and operating systems.

Education/Training

• Possession of a Bachelor's Degree in Information Technology, Computer Science, Management Information Systems, or related fields.
• Certifications in Information Technology, Networking, or Systems Administration with an emphasis on IT security.

Required License/Certification

• Possession of a certification in administrative network equipment, such as Cisco Certified Network Associate (CCNA) or Cisco Certified Network Professional (CCNP).

Desirable Degree/License/Certification

• Certified Information Systems Security Professional (CISSP)
• VMware Certified Professional (VCP) Certification.
• VMware Certified Technical Associate (VCTA) Certification.
• Palo Alto Certified Network Security Administrator (PCNSA) Certification.

DMV Class

• Possession of a valid California Class C driver's license and a satisfactory driving record.