Job Information
HEALTH AND HUMAN SERVICES COMMISSION Cybersecurity Analyst III in Austin, Texas
Job/Position DescriptionPerforms advanced (senior-level) cybersecurity analysis work. Provides guidance in strategic and tactical cybersecurity operations planning and implementation for the Health and Human Services Commission (HHSC) Information Security Office and the Enterprise Information Security Office. Oversees the IT cybersecurity operations, delivery, engineering, and architecture for the enterprise. Protects cybersecurity assets and delivers cybersecurity incident detection, incident response, threat assessment, cyber intelligence, software security, and vulnerability assessment services. Oversees the Cybersecurity Operations Center (CSOC) which consists of people, processes and technologies involved in providing situational awareness through the detection, containment, and remediation of cybersecurity threats. Works under limited supervision, with considerable latitude for the use of initiative and independent judgment. May assign and/or supervise the work of others. Essential Job FunctionsAttends work on a regular and predictable schedule in accordance with agency leave policy and performs other duties as assigned.1. (30%) Monitors and analyzes cybersecurity alerts from cybersecurity tools, network devices, and information systems. Evaluates network and system security configuration for best practices and risk-based access controls. Performs direct analysis and configuration of security tools and operational systems to ensure successful integration within the enterprise environments. Assesses established security policy criteria against actual operational functions to ensure success criteria of data security controls and processes. Develops repeatable reporting metrics and data presentations from numerous security toolsets to include, but not limited to, Security Incident Event Monitoring (SIEM) logs, Packet Capture Analysis, Web Proxy Security Management Appliance (SMA) and Network Performance Monitoring Systems that detail network data usage, access, and statistic reporting capabilities. Develops useful reporting, integration, alerting and automation of informational feeds related to/from these tools to enhance the situational awareness and provide auditable performance metrics for the CSOC. Conducts breach readiness assessments. Designs, tests and practices breach management response. Conducts threat modeling and develops best practices and procedures to proactively identify threat vectors and anomalies in large volumes of data.2. (20%) Provides direction and guidance in strategic and tactical cybersecurity operations planning and implementation for 1) the HHSC Information Security Office and 2) the Enterprise Information Security Office. Monitors and maintains cybersecurity infrastructure and policies and procedures to protect information systems from unauthorized use. Develops incident response and discovery workflows to speed breach detection timeframes. Oversees breach management processes and policies, information controls, secure communications, information rights, data classification and post-breach remediation and security. Enhances and improves the CSOC Program while providing technical expertise to cybersecurity staff. Provides subject matter expert guidance for cybersecurity operations initiatives and their integration into enterprise IT programs and services. Leads the establishment and implementation of the CSOC strategic plan to mitigate risks while complying with legal, statutory, contractual, and internally developed requirements. Serves as the https://jobshrportal.hhsc.state.tx.us/ENG/CareerPortal/job_profile.cfm?szOrderID=613686 Copy the URL in the preceding sentence to an Internet Explorer browser to apply to the job directly through the Texas Health and Human Services Career Portal.