WHAT YOU WILL DO:
This position exhibits a high degree of complexity. The Cybersecurity Analyst III must analyze diverse, high-volume security log data from multi-cloud and on-premise environments. The role requires the ability to differentiate between false positives and sophisticated, multi-stage cyber threats. Investigations involve reverse-engineering attack vectors, analyzing malware, and correlating disparate data points to uncover root causes while preserving data evidence according to federal audit standards. Works under minimal supervision, with extensive latitude for the use of initiative and independent judgment. The incumbent independently prioritizes daily operations and dictates investigation methodologies based on threat severity.
KNOWELDGE, SKILLS, & ABILITIES:
Knowledge of:
- Advanced cybersecurity frameworks (NIST CSF, MITRE ATT&CK, NIST SP 800-53 Rev. 5, and TAC 202); federal protection standards including IRS Pub 1075 and CJIS; network security architecture, protocols, and routing; and automated orchestration methodologies.
Skill in:
- Querying and configuring enterprise SIEM and SOAR platforms; analyzing raw packet captures (PCAPs); deploying endpoint detection and response (EDR) tools; and developing automation logic for security playbooks.
Ability to:
- Analyze complex technical data under high-pressure scenarios; communicate highly technical risk concepts clearly to non-technical stakeholders; and maintain absolute confidentiality regarding sensitive state investigations.
- Perform other related duties as assigned.
YOU QUALIFY WITH:
- Eight years of full-time experience in cybersecurity analysis, information security analysis, or digital forensics.
- Relevant academic credits may be applied toward experience qualifications for this position.
- Certification as a SANS GIAC Information Security Professional (GISP), Certified Information Security Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), Certified Information System Security Professional (CISSP), or equivalent senior level cybersecurity certification is required.
PREFERRED QUALIFICATIONS:
- Seven (7) or more years of experience in cybersecurity analysis, with specific experience managing compliance audits and investigations within a State of Texas agency.
- Advanced Technical Skills: Proven experience authoring automated SOAR playbooks or writing custom detection logic (e.g., Sigma rules, YARA).
YOU GAIN:
- A Family Friendly Certified Workplace
- Competitive salary: $10,091.92/month
- Defined Retirement Benefit Plan
- Optional 401(k) and 457 accounts
- Medical Insurance
- Paid time off, including time for vacation, sick and family care leave
- Additional benefits for active employees can be found at https://www.ers.texas.gov/Active-Employees/Health-Benefits.
Duty involves up to 10% travel within the state of Texas.
VETERANS:
Use your military skills to qualify for this position or other jobs! Go to www.texasskillstowork.com to translate your military work experience and training courses into civilian job terms, qualifications, and skill sets. Also, you can compare this position to military occupations (MOS) at the Texas State Auditors Office by pasting this link into your browser: https://hr.sao.texas.gov/Compensation/MilitaryCrosswalk/MOSC_InformationTechnology.pdf
HOW TO APPLY:
To be considered, please complete a State of Texas Application for Employment and apply online at www.workintexas.com or on Taleo ( Job Search ). TWC is not considering applications from individuals who require sponsorship for an employment visa, now or in the future, for this position. This includes, but is not limited to, individuals currently on H-1B, F-1 (OPT/CPT), or H-4 visas. You must be a Texas resident to work for the Texas Workforce Commission or willing to relocate to Texas. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. A position utilizing this classification will be designated as security sensitive according to the Texas Labor Code, Section 301.042.
