Information Security Specialist

As an Information Security Specialist, you will play a key role in securing enterprise systems by ensuring compliance with State of California regulations, FedRAMP, and NIST 800-53 frameworks. You will lead security policy implementation, risk assessments, and vulnerability management while providing expert guidance on cybersecurity best practices. This role requires strong technical acumen in security architecture, cloud security, and compliance frameworks, along with hands-on experience in system security enhancements and maintenance.

WORKSITE: On-Site Sacramento. CA

WORK SCHEDULE: Monday - Friday

WHAT WE OFFER:

• Paid sick leave based on state regulations after 90 days of employment

• Medical, dental, and vision are offered after a waiting period (60% paid by Fortuna)

• Free TeleMedicine and Mental Health for all employees and their families

• Additional volunteer options such as Group Life Insurance, Accidental Insurance, Critical Care, Short Term Disability

WHAT YOU'LL DO:

• Plan, design, and build Virtual Machine Infrastructure Platform (VMIP)

• Develop and document security enhancements for the VMIP.

• Perform functional, system, and integration testing, ensuring compliance with security policies.

• Lead and collaborate with developers and security teams to implement cybersecurity controls.

• Deploy security updates and changes to production environments, ensuring operational integrity.

• Provide maintenance and operations (M&O) support for security infrastructure.

• Conduct security assessments, risk analysis, and gap identification to enhance cybersecurity posture.

• Troubleshoot security vulnerabilities and incidents, implementing corrective measures.

• Deliver detailed weekly status reports on security-related tasks and completed work.

WHAT YOU'LL BRING:

• 10+ years of experience in Cybersecurity, with expertise in security policies and implementation.

• 5+ years of experience executing projects for the State of California.

• 3+ years of experience in FedRAMP compliance and State Administrative Manual (SAM) 5300 and Statewide Information Management Manual (SIMM) standards.

• 3+ years of experience working with the NIST 800-53 framework.

• Certified Information Systems Security Professional (CISSP)

• Certified Ethical Hacker (CEH)

• Strong expertise in security testing, risk assessment, and compliance enforcement.

• Hands-on experience with cloud security, system hardening, and enterprise security architecture.

• Proven ability to analyze security vulnerabilities, recommend solutions, and implement security controls.

Fortuna operates as a staffing agency that sources screens and presents potential candidates for employment opportunities on behalf of our clients.

Fortuna was founded in 2012 by practicing professionals with more than 50 combined years of experience. Our headquarters is in McClellan, California with offices in Los Angeles and New York, and satellite offices in the Philippines and Israel. Fortuna is an active member of multiple California service agreements, including the CMAS, ITMSA (Tier 2), and CalPERS SpringFed Pool, as well as multiple municipalities and large corporation vendor pools

Career Site: www.gofortuna.com.