JOB POSTING FOR LEWIS AND CLARK COUNTY
Cybersecurity Specialist
Closing Date: January 25, 2026
Pay Rate: $34.55 per hour to $37.60 per hour
Position Type/Status: Regular, Full-time, Non-exempt
The Lewis and Clark County Information Technology and Services Department is hiring for a Cybersecurity Specialist. Under general direction of the IT&S Operations & Security Manager, this position assists in protecting County information technology infrastructure, citizen data, and access to public services from cyber threats.
Duties and Responsibilities
- Assists with protecting the Organization’s IT infrastructure, public services, and data from cyber threats;
- Performs continuous technical security auditing and monitoring across desktop, server, network, and cloud environments to identify misconfigurations, unauthorized access, and policy violations;
- Monitors network infrastructure logs from firewalls, switches, routers, wireless controllers, and VPN systems to identify anomalous traffic patterns, lateral movement, or unauthorized connections;
- Reviews and enforces cloud and hybrid identity logs, authentication events, and administrative actions to ensure proper access controls and policy enforcement;
- Analyzes and correlates desktop, server, network, and cloud log data to identify security threats and anomalies;
- Identifies misconfigurations in operating systems, applications, and network devices that increase security risk;
- Develops, tests and updates vulnerability management by verifying patch levels, configuration changes, and compensating controls across endpoints, servers, and network devices;
- Mitigates device compliance policies, patch management, and endpoint detection and response solutions to safeguard assets;
- Collaborates with desktop, server, and network administrators to remediate identified risks and validate corrective actions;
- Implements and validates password policies, MFA enforcement, and privileged access controls;
- Performs in-depth Active Directory auditing, including user and computer accounts, group memberships, Group Policy Objects (GPOs), service accounts, and delegated permissions;
- Assists in ensuring user education and compliance with IT&S and Organizational technology policies and procedures;
- Conducts and documents security awareness training programs for the Organization;
- Conducts cyber security investigations following established incident response procedures;
- Documents, mitigates and resolves incident response efforts by providing technical analysis of activities during security events;
- Reviews backup, recovery, and system event logs to verify readiness for ransomware or data-loss scenarios;
- Assists in reviewing and updating of IT & S security policies, protocols and procedures;
- Performs other duties as assigned.
This job description is not designed to cover or contain a comprehensive list of activities, duties or responsibilities required for this job. Duties, responsibilities, and tasks may change with or without notice.
Required Qualifications – Experience & Education
The knowledge, skills, and abilities required for this position are acquired through a combination of education and experience equivalent to an associate’s degree in computer science, information systems, computer or network engineering and at least two (2) years’ experience in information security, systems auditing or security monitoring. Security+ or equivalent security certification required. Two (2) years of computer technology experience can be substituted for a degree. Other combinations of education and experience will be considered on a case-by-case basis.
Knowledge Skills & Abilities
Examples of Knowledge
- Lewis and Clark County and IT&S policies and procedures;
- Desktop, server, and network architectures commonly used in enterprise and public-sector IT environments;
- Windows and/or Linux operating systems, including authentication, authorization, logging, security concepts and auditing;
- Active Directory architecture, including domain controllers, replication, Group Policy, security and identity lifecycle management;
- Network principles and security for TCP/IP, DNS, DHCP, VPNs, firewalls, VLANs, and intrusion detection/prevention;
- Security logging sources from endpoints, servers, network devices, and cloud platforms;
- Cybersecurity frameworks and standards, including NIST publications and other recognized models;
- Sources of security event data, including log management, monitoring tools, and related technologies;
- Security auditing and monitoring practices for Active Directory, cloud systems, and technology infrastructure.
Examples of Skills and Abilities
- Use common computer hardware such as desktops, laptops, servers, thumb drives, switches, Firewalls, USP’s, desk phone, cell phone, mouse, and keyboards;
- Perform technical audits of workstations, servers, Active Directory, and network devices for security compliance; Use relevant information and individual judgment to determine whether events or processes comply with laws, regulations, or standards;
- Proficient in analyzing data and information;
- Communicate effectively verbally and in writing;
- Work under pressure, prioritize tasks, and meet investigative and reporting deadlines;
- Establish and maintain effective relationships with fellow employees, supervisors, vendors and citizens;
- Follow internal ticketing procedures for reporting and tracking security incidents;
- Implement password complexity and MFA policies in accordance with IT&S standards;
- Use NIST Cybersecurity Framework categories to assess current security environment.
Special Requirements
- May be required to work extended hours to identify, contain, and remediate a cyber security threat.
- CompTIA Security + or equivalent security certification is required.
- Must be able to successfully pass a Federal and State criminal history background check.
Physical Demands
Duties are generally performed in an office environment where hazards and discomforts are controlled and modifiable. This position requires the ability to bend at the waist, kneel, reach over the head, talk, hear, and see. Must be able to move or lift documents and materials weighing up to 30 pounds. Position requires knowledge and use of typical office equipment including copy machines, telephone and personal computer. Position requires frequent contact with fellow employees, governmental agencies, vendors, contractors and citizens.
Application Instructions
Applications for this position are accepted online only through our career portal. Job Opportunities - Lewis & Clark County (lccountymt.gov)
www.lccountymt.gov/Government/Human-Resources/Job
The following items are required along with the on-line application:
- Resume
- Attach resume to online application in designated section .
- Cover Letter
- Attach cover letter to online application in designated section.
- CompTIA Security + or equivalent security certification number
- List number on resume or in certification section of the online application.
Disclaimer: Equal Opportunity Employer
