DPS - IT - Cybersecurity Analyst

GENERAL DESCRIPTION: Perform complex (journeylevel) information security and cybersecurity analysis work. Work involves learning and assisting with monitoring security measures for information systems and infrastructures to regulate access to computer configuration and data files and to prevent unauthorized modification, destruction, or disclosure of information. Work also involves protecting cybersecurity assets and delivering cybersecurity incident detection, incident response, threat assessment, cyber intelligence, software security, and vulnerability assessment services. May coordinate the work of others. Works under general supervision, with limited latitude for the use of initiative and independent judgment., Applicants must fully complete the summary of experience to determine if minimum qualifications are met., 1. Monitors and analyzes cybersecurity alerts from incident detection given from cybersecurity tools, network devices, and information systems. Takes preventative measures based on outcome from the analysis of the alert.

1. Perform vulnerability scans of networks and applications to assess effectiveness and identify weaknesses.

2. Perform technical risk assessments and reviews of account permissions.

3. Perform forensic analysis of information systems and portable devices and forensic recovery of data using assessment tools.

4. Monitor systems and procedures to protect data systems and databases from unauthorized access.

5. Research and analyze cybersecurity threat indicators and their behaviors for the prevention, detection, containment, and correction of data security breaches, and recommends threat mitigation strategies.

6. Support the implementation of computer system security plans with agency personnel and outside vendors.

7. Train users and promotes security awareness to ensure system security and improve application, server, and network efficiency.

8. Support privacy impact assessments and assist in documenting/organizing data privacy and policy requirements.

9. Assist with basic data classification and tagging based on policy.

10. Attend work regularly and observe approved work hours in accordance with agency leave and attendance policies.

11. Perform other duties as assigned., The physical and environmental demands described here are representative of those encountered and/or necessary for the employee to successfully perform the essential functions of this job; reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. * Environment: Office/Indoors; * Ambulatory skills, e.g. stand, walk, sit; * Handeye coordination and arm/hand/finger dexterity; * Ability to speak, hear, and exercise visual acuity; * Ability to transfer weights of up to twentyfive (25) pounds anticipated for this position; * Driving requirements: Low 1 or less times/week.

Education Graduation from an accredited fouryear college or university required, with a major and/or emphasis of computer science, information technology or a related field is preferred.

Experience Minimum of two (2) years experience performing cybersecurity analysis, information security analysis, or information assurance is required.

Substitution Note: Additional work experience of the type described or other related education may be substituted for one another on a yearforyear basis.

Licensure and/or Certification One or more of the following certifications within (1) year of hire:

a. CEH, CSA+, CCNA Security, ECSA, CND, VCP, SSCP, GIAC (Any), CISA, CISSP, CISM, CRISC

This list is not all inclusive. Alternative certifications may be accepted at the discretion of management.

Note: Certifications from a higher tier may also be substituted.

If driving is required, must possess a valid driver license from state of residence.

Critical Organizational Infrastructure requirements This job may be responsible for conducting research on, working on, or having the ability to access critical organizational infrastructure; must be able to maintain the security and integrity of the infrastructure related to this role. Additionally, and more specifically, must not be employed by nor have any connection or continuous connections to any governmental entity or political apparatus of a country listed in 15 C.F.R. 791.4.

Regulatory knowledge Working knowledge of, or the ability to rapidly assimilate information related to TXDPS, State and Federal regulations, legislation, guidelines, policies and procedures.

Technology Proficiency with Microsoft Office and appropriate levels of proficiency with utilized software and systems (e.g. CAPPS, SharePoint) and be able to learn new software/systems.

Interpersonal Skills Must demonstrate an ability to exercise poise, tact, diplomacy and an ability to establish and maintain positive, working/professional relationships with internal/external customers. Must demonstrate DPS core values: Integrity, Excellence, Accountability, and Teamwork.

Organizational and Prioritization Skills Must be organized, flexible, and able to effectively prioritize in a multidemand and constantly changing environment; able to meet multiple and sometimes conflicting deadlines without sacrificing accuracy, timeliness or professionalism.

Presentation/Communication Skills Must be able to construct and deliver clear, concise, and professional presentations and/or communications to a variety of audiences and/or individuals.

Research and Comprehension Must demonstrate ability to quickly and efficiently access relevant information and be able to utilize and/or present research and conclusions in a clear and concise manner.

Analytical Reasoning/Attention to Detail Must demonstrate an ability to examine data/information, discern variations/similarities, and be able identify trends, relationships and causal factors, as well as grasp issues, draw accurate conclusions, and solve problems.

Confidentiality and Protected Information Must demonstrate an ability to responsibly handle sensitive and confidential information and situations and adhere to applicable laws/statutes/policies related to access, maintenance and dissemination of information.

Safety Must be able to work in safe manner at all times, avoiding shortcuts that have potential adverse results/risks, and must be able to comply with safety standards and best practices.

Schedule and Travel Availability for afterhours, weekend work, and emergencies is required. This position may have the ability to telecommute based on the needs of the division/agency. Travel statewide as needed.

Salary is contingent upon qualifications and is subject to salary administration and budgetary restrictions.