IT Cybersecurity Specialist

Information Technology

IT Cybersecurity Specialist - Career Ladder Group

Starting Rates

I -  $60,590.40

II - $63,627.20

III -$66,809.60

Must be able to perform the essential functions of the position, with or without reasonable accommodation. Essential functions and job-related requirements, including physical and cognitive demands, are described below.This job description outlines the general scope of duties and responsibilities and is not intended to be an exhaustive list of all tasks that may be assigned. 

MAJOR FUNCTION

The Cybersecurity Specialist supports the Polk County Board of County Commissioners by assisting with and contributing to information security programs, including security awareness, security information and event management (SIEM), and vulnerability management.

This role focuses on supporting the planning, implementation, tracking, and reporting of cybersecurity initiatives while gaining hands-on experience with tools and methodologies used by the cybersecurity team.

The Cybersecurity Specialist works under the guidance of senior cybersecurity staff to learn, develop technical skills, and contribute to maintaining secure systems and practices. This position helps ensure that security best practices are followed across new and existing technologies while maintaining a high standard of integrity and ethical conduct.

ILLUSTRATIVE DUTIES

• Assist with configuring and executing vulnerability scans, analyzing results, and supporting remediation tracking.

• Support administration of security awareness tools and training schedules, including phishing simulations.

• Monitor security dashboards and assist in investigating anomalous findings, escalating issues as appropriate.

• Research, monitor, and assess security threats, anomalies, and malicious activities.

• Develop and maintain security documentation, including procedures, workflows, and incident reports.

• Establish secure baselines for new systems, hardware, and applications.

• Evaluate criticality of findings using common vulnerabilities & exposures (CVE) ratings and and prioritization guidance provided by senior staff.

• Generate key performance indicators (KPIs) and metrics.

• Collaborate with internal teams to resolve vulnerabilities within established timelines.

• Ensure compliance with cybersecurity standards and regulations.

• Support security information and event management (SIEM) tools and processes.

• Assist with security assessments, internal reviews, and preparation for external audits.

• Support automation efforts to improve configuration consistency and operational efficiency.

• Consult with stakeholders on secure practices, defensible network architecture, and compliance protocols.

• Perform other duties as assigned.

KNOWLEDGE, ABILITIES AND SKILLS

• Foundational knowledge of cybersecurity principles, best practices, and compliance standards

• Familiarity with cybersecurity tools, vulnerability assessment concepts, and basic intrusion detection/prevention techniques.

• Basic understanding of IT security practices, networking concepts, and incident response fundamentals.

• Awareness of common attack vectors, threats, and anomaly detection concepts.

• Ability to assist in identifying and analyzing vulnerabilities and security events under supervision.

• Developing skills in monitoring and responding to cybersecurity incidents, with appropriate escalation.

• Ability to develop documentation, reports, and training materials.

• Capable of preparing detailed reporting, after-action reports (AARs), and delivering effective security education and training.

• Strong analytical thinking and willingness to learn new tools and technologies.

• Effective communication skills for working within a team environment.

• Ability to follow established processes and contribute to continuous improvement efforts.

MINIMUM QUALIFICATIONS

• Must possess and maintain a valid Florida’s Driver’s License

• A comparable combination of related training and experience may be substituted for the minimum qualifications, except where licensure is required

IT Cybersecurity Specialist I – Pay Grade 18

• Associate’s degree in cybersecurity, networking, information technology, or a related discipline

  • An equivalent combination of education, training and experience which provide the necessary knowledge, skills and abilities and other competencies necessary for success in the target position may be considered.
     

• One certification from the approved list below:
  • CompTIA Security+
  • CompTIA Network+ 
  • ISC2 SSCP

    • Equivalent / more advanced certifications (e.g. CISSP, CySA+, CASP+ / SecurityX, GSEC, SSAP, SSCP, GCIH) will satisfy this requirement.
       

IT Cybersecurity Specialist II – Pay Grade 19

• Minimum 2 years BoCC Information Security team experience*
• Basic vendor/platform certification related to tools used by the Information Security team
• One certification from the approved list below:
  • CompTIA CySA+
  • GIAC GCIH
  • SANS SSAP – Security Awareness Professional

IT Cybersecurity Specialist III – Paygrade 20

• Minimum 3 years BoCC Information Security team experience*
• Advanced vendor/platform certification related to tools used by the Information Security team
• One certification from the approved list below:
  • CompTIA SecurityX (formerly CASP+)
  • GIAC GCIA – Intrusion Analyst
  • GIAC GMON – Continuous Monitoring
  • GIAC GRID – Incident Detection and Response
  • ISC2 CGRC – Certified in Governance, Risk and Compliance

* Relevant external experience may qualify as equivalent

** External candidates must obtain within 6 months of hire

Industry certifications subject to updates based on changes to FL Digital Service / DoD standards

SPECIAL REQUIREMENTS

• This full-time position is based in Polk County, Florida. Flexibility may be required to support emergencies outside of regular business hours.

All Polk County BoCC employees will be required to work before, during, or after an emergency. During an emergency, employees may temporarily be assigned to work and perform duties outside the normal scope of their position, location and work schedule to fit the needs of the county and its residents.