1000000557.SENIOR CYBERSECURITY ANALYST.INFO TECH - SECURITY

Dallas County; Dallas (TX); Hybrid; USD 80,000 - 100,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Paid time off

Job summary

Dallas County, located in Texas, is looking for a Cybersecurity professional to secure their information systems. This role involves incident response, compliance monitoring, and integrating technical security operations.

The candidate will manage security operations, conduct threat hunting, and ensure adherence to policies like CJIS and HIPAA. A Bachelor's degree and six years of experience in cybersecurity are required.

Qualifications

• Minimum of six (6) years of IT experience in cybersecurity operations.
• Experience in roles such as Security Analyst, Security Engineer, or SOC Analyst.

Responsibilities

• Responds to and investigates escalated security tickets and alerts.
• Performs advanced triage and incident response activities.
• Conducts proactive threat hunting across security tools.

Skills

Cybersecurity operations

Incident response

SIEM management

Risk assessment

Communication skills

Education

Bachelor’s degree in Information Systems, Cybersecurity, Computer Science, or related field

Tools

SIEM

EDR

DLP technologies

Python

PowerShell

Job description

Job Description

Secures Dallas County’s information systems and data. Combines enterprise-wide cyber threat detection, incident response, compliance monitoring, and security policy implementation. Supports the County’s hybrid environment by integrating technical security operations with regulatory mandates, including CJIS, HIPAA, and NIST 800-53. Works closely with IT Security Engineering and Compliance teams to defend the Dallas County infrastructure from evolving threats while ensuring adherence to internal and external security requirements.

Responsibilities

• Responds to and investigates escalated security tickets, requests, alerts, and events.
• Performs advanced triage, coordinates with technical teams to ensure containment, and documents incident response activities.
• Supports daily operations of the County’s security infrastructure, including SIEM, endpoint detection and response, and related tooling.
• Performs alert tuning, rule validation, and ensures reliable telemetry flow into security platforms.
• Conducts proactive threat hunting activities across SIEM, EDR, and available log sources.
• Analyzes behavioral patterns and threat intelligence to identify anomalous activity.
• Develops hypotheses, executes investigations, and reports findings.
• Manages incoming security-related tickets, requests, and inquiries from internal departments.
• Prioritizes and tracks resolution, provides technical guidance, and ensures timely communication and closure of support cases.
• Develops and maintains operational documentation, including incident response runbooks, standard operating procedures (SOPs), technical workflows, and knowledgebase articles.
• Ensures documentation is version-controlled and aligned with policy and tool changes.
• Participates in IT and security-related projects by providing technical guidance, control implementation support, and input on security design considerations.
• Collaborates with Engineering and IT to ensure secure system configurations.
• Contributes to the development and maintenance of IT security policies, procedures, and operational standards.
• Works with Security Compliance, Engineering, and IT teams to ensure technical controls support Dallas County policies and regulatory requirements.
• Performs other duties as assigned.

Qualifications

Education, Experience and Training: Education and experience equivalent to a Bachelor’s degree in Information Systems, Cybersecurity, Computer Science, or related field, and six (6) years of IT experience in cybersecurity operations, including roles such as Security Analyst, Security Engineer, or SOC Analyst.

Certifications (Preferred)

• Certified Information Systems Security Professional (CISSP)
• GCIH
• GCIA
• CompTIA Cybersecurity Analyst (CySA+)

Special Requirements, Knowledge, Skills & Abilities

• Strong communication skills, both written and verbal, for collaboration and reporting.
• Ability to work independently and effectively in a team-oriented environment.
• Strong analytical, organizational, and documentation skills.
• Excellent verbal and written communication skills with the ability to present findings to both technical teams and executive stakeholders.
• Ability to create, implement and support security policies, procedures, and operational controls.
• Ability to engage and manage engagement with 3rd party security vendors and managed security service providers.
• Knowledge of implementing, managing and configuring security and threat monitoring tools including SIEM, SOAR, EDR, and DLP technologies.
• Ability to participate in an on-call rotation for after-hours security incident escalation.
• Advanced knowledge of cybersecurity operations, including SIEM management, threat detection, and hands‑on incident response.
• Ability to lead or mentor junior analysts or coordinate team-based incident investigations.
• Knowledge of regulatory and compliance frameworks such as CJIS, HIPAA, PCI‑DSS, NIST 800‑53, ISO 27001, and risk assessment methodologies.
• Ability to enforce and manage regulatory compliance standards such as CJIS, HIPAA, NIST, or similar frameworks.
• Skill in threat hunting, forensic analysis, malware behavior analysis, and endpoint forensics platforms.
• Skill in interpreting and correlating alerts from multiple sources (EDR, firewalls, cloud logs, email gateways, identity systems) to identify sophisticated attacks or insider threats.
• Experience in scripting or programming abilities (e.g., Python, PowerShell) for automating security tasks or parsing large datasets.
• Experience with cloud‑native security tools and monitoring across Microsoft Azure, AWS, or Google Cloud environments.
• Ability to contribute to security policy development, control testing, and continuous improvement of security monitoring capabilities.
• Ability to conduct post‑incident reviews, root cause analysis, and draft executive‑level incident reports.
• Ability to manage high‑pressure situations and lead coordinated response efforts during security incidents.
• Skilled in technical security and the ability to interpret and apply security policy and standards.
• Knowledge of security tooling (SIEM, EDR, DLP), security response automation, and proactive threat hunting.
• Must have a valid Texas Driver’s License and a good driving record. Will be required to provide a copy of a 10‑year driving history and maintain compliance with Texas laws regarding criminal justice database access requirements.
• Physical/Environmental Requirements: Standard office environment; ability to lift and carry up to 25 lbs unassisted; work a 40‑hour hybrid work week with on‑call availability for two days per month; sitting for extended periods of time.

About Us

Established in 1846, Dallas County is committed to serving the community through innovation, transparency, and efficiency. As the second largest county in Texas, we provide a wide range of services to support the safety, health, and well‑being of our residents. From public safety and justice to health services and infrastructure, our team is dedicated to fostering a thriving, inclusive, and resilient community. With a focus on operational excellence and a commitment to continuous improvement, Dallas County works to deliver the highest quality services that enhance the lives of all who live, work, and visit here.