Cybersecurity Analyst

City of Cedar Hill • Full-time • Cedar Hill, Texas, United States • $88.66k - $128.74k / year • 6h ago

Nestled in the heart of North Texas, Cedar Hill is a community defined by distinctive character, natural beauty, and commitment to excellence. We take pride in our clean and sustainable environment, where the health and well-being of our residents and visitors are top priorities. From maintaining pristine neighborhoods to protecting our natural resources, Cedar Hill is dedicated to being a place where people live, work, and play in a safe, well-maintained environment. We foster an engaged, active community and encourage collaboration in everything we do.

What sets the City of Cedar Hill apart is our culture. We live and work by five core values that define who we are: High Standards, Teamwork, Premier Customer Service, Family-Oriented, and Fun. These values shape every decision we make and guide how we serve our residents as we continue to grow as the Natural Heart of the Metroplex.

The City of Cedar Hill is seeking a dedicated Cybersecurity Analyst to help protect the systems and information that support essential public services by strengthening the City's cybersecurity posture, managing security risks, and serving as the primary resource for cybersecurity operations and strategy.

The purpose of this position is to perform a variety of specialized duties in connection with the administration of the cybersecurity of the City’s computer information systems. Under general supervision from the IT Director, this position is responsible for protecting the City's information systems, networks, applications, and data from cybersecurity threats. This position monitors and responds to security incidents, manages cybersecurity platforms and controls, conducts vulnerability assessments, supports compliance initiatives, and promotes cybersecurity awareness throughout the organization. The Cybersecurity Analyst serves as the primary resource for security operations and works closely with IT staff, municipal departments, public safety personnel, vendors, and managed security providers to ensure the confidentiality, integrity, and availability of critical City systems and information. This position does not directly supervise employees but serves as the City's lead cybersecurity resource, providing functional leadership and subject matter expertise in cybersecurity matters.

This is a full-time position, offering a flexible schedule, including occasional remote or hybrid work arrangement, subject to operational needs.

How You Add Value

Provides premier customer service to internal and external customers by responding to requests, incidents, and inquiries in a timely and professional manner. Performs cybersecurity functions to protect the confidentiality, integrity, and availability of the City's information systems and data. Proactively collaborates with City staff to implement security measures, maintain business continuity, support compliance efforts, and promote cybersecurity awareness throughout the organization.
Monitor security events, alerts, and investigations generated by the City's SIEM and Managed Detection and Response (MDR) platforms. Analyze indicators of compromise, suspicious activities, reported security incidents, and escalate critical incidents to IT management and external security partners when necessary.
Maintain security dashboards, reports, and metrics. Coordinate incident response activities and document investigations, findings, and remediation efforts.
Administer and monitor Microsoft Active Directory and Microsoft Entra ID security controls. Review and maintain user accounts, security groups, and role-based access controls. Monitor and investigate privileged account activity.
Implement and manage multi-factor authentication, conditional access, and identity protection policies. Support account provisioning and deprovisioning processes.
Administer and maintain the security posture of the Microsoft 365 environment, including Microsoft Defender, Exchange Online, SharePoint, OneDrive, Teams, and security compliance tools.
Investigate, respond to, and remediate security threats including phishing, malware, suspicious account activity, and unauthorized access attempts while implementing security best practices and policy enforcement.
Manage and monitor email security platforms, to detect, investigate, and remediate phishing, impersonation, account takeover, and other email-based threats.
Conduct vulnerability assessments, review threat intelligence, and identify security risks across systems, networks, and applications while coordinating timely remediation efforts.
Support security audits, penetration testing, and risk management initiatives by tracking corrective actions and validating the effectiveness of implemented security controls.
Support compliance with CJIS, applicable regulations, security standards, and City cybersecurity policies through audits, risk assessments, and documentation management.
Deliver cybersecurity awareness training, phishing simulations, and security education programs to promote a strong security culture across the organization.
Maintain cybersecurity incident records, security policies, and recovery procedures while assisting with business continuity and disaster recovery planning and testing.
Provide guidance to employees and departments on cybersecurity best practices, risk reduction, and the identification and reporting of security threats.
Collaborate with IT staff, department stakeholders, vendors, and managed security providers to evaluate, implement, and maintain secure technology solutions while ensuring cybersecurity requirements are incorporated into infrastructure, applications, and City projects.
Maintains regular and reliable attendance to ensure timely monitoring, response, and support of critical technology and cybersecurity operations. Work may be performed on-site or through an approved remote or hybrid work arrangement, subject to operational needs.

What You Bring to the Role

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent required.
A minimum of three years of related experience in cybersecurity, information security, systems administration, or network administration.
Local government experience strongly preferred.
Continuing education related to cyber security, resulting in related certification(s) required. Certifications eligible for consideration include Microsoft Certifications, Cybersecurity Certifications, Fortinet Certifications, Cisco Certified Network Associate, or equivalent.
Valid Texas Class C Drivers License, meeting City driving standards.
Must be eligible for and maintain Criminal Justice Information Systems (CJIS) clearance.