Cybersecurity Analyst II

FALL CREEK FARM & NURSERY; Austin (TX); On-site; USD 65,000 - 84,000; Full time

Job summary

Health and Human Services Commission in Austin, Texas, seeks a Cybersecurity Analyst II to strengthen cloud security, web app protection, and GRC activities across on‑premises and cloud environments.

The role develops SSPs, documents vulnerabilities, and delivers security training to agency stakeholders, with performance under limited supervision and ample opportunity for independent judgment.

Responsibilities

• The Cybersecurity Analyst II performs advanced information security analysis with a focus on cloud security, web application protection, and governance, risk, and compliance activities.
• The analyst conducts security assessments and risk-based needs assessments across assigned systems.
• The role provides advisory services to business partners on secure architecture and cloud configuration requirements.

Job description

Career Opportunities: Cybersecurity Analyst II (20848)

Posting ID20848-Posted09/01/2026-Health & Human Services Comm-IT Security Posture EI-Computer and Mathematical- Additional Shifts available (1) -c. $5000 - $6999 per month

Join the Texas Health and Human Services Commission (HHSC) and be part of a team committed to creating a positive impact in the lives of fellow Texans. At HHSC, your contributions matter, and we support you at each stage of your life and work journey. Our comprehensive benefits package includes 100% paid employee health insurance for full-time eligible employees, a defined benefit pension plan, generous time off benefits, numerous opportunities for career advancement and more. Explore more details on the Benefits of Working at HHS webpage .

Functional Title: Cybersecurity Analyst II
Job Title: Cybersecurity Analyst II
Agency: Health & Human Services Comm
Department: IT Security Posture EI
Posting Number: 20848
Closing Date: 10/01/2026
Posting Audience: Internal and External
Occupational Category: Computer and Mathematical
Salary Range: $5,797.66-$7,500.00
Pay Frequency: Monthly
Salary Group: TEXAS-B-25
Shift: Day
Additional Shift: Days (First)
Telework:
Travel:
Regular/Temporary: Regular
Full Time/Part Time: Full time
FLSA Exempt/Non-Exempt: Exempt
Facility Location:
Job Location City: AUSTIN
Job Location Address: 701 W 51ST ST
Other Locations: None
MOS Codes: 0605,0630,0631,0639,0670,0679,0681,1702,1705,1710,1720,1721,1799,2611,2659,8055,8858,14N,14NX,170A
170B,17A,17B,17C,17C0,17DX,17S,17SX,17X,181X,182X,183X,184X,1B4X1,1D7X1,1N4X1,255A,255N,255S,25B,25D
26A,26B,26Z,514A,5C0X1D,5C0X1N,5C0X1R,5C0X1S,5IX,681X,682X,683X,781X,782X,783X,784X,CTI,CTM,CTR,CWT
CYB10,CYB11,CYB12,CYB13,CYB14,IS,ISM,ISS,IT,ITS

This position is open to U.S. Citizens and permanent residents.

This onsite role requires the selected candidate to work from an HHS office in Austin, Texas.

The Cybersecurity Analyst II performs advanced information security analysis with a focus on cloud security, web application protection, and governance, risk, and compliance activities. The position supports both on ‑ premises and cloud environments by evaluating, implementing, and monitoring security controls to prevent unauthorized access, modification, or disclosure of information resources.

The analyst conducts security assessments and risk-based needs assessments across assigned systems. Responsibilities include assisting with the development of System Security Plans (SSPs), documenting vulnerabilities and corrective actions, analyzing administrative, technical, and operational controls, and preparing audit documentation, formal reports, and leadership ‑ level reporting.

The role also provides advisory services to business partners, offering guidance on secure architecture, secure application development practices, and cloud configuration requirements. The analyst maintains compliance and risk artifacts in a Governance, Risk, and Compliance (GRC) platform, supports Authorization to Operate (ATO) activities, and delivers targeted security training to agency stakeholders. Work is performed under limited supervision with significant latitude for independent judgment.

Essential Job Functions (EJFs):

Attends work on a regular and predictable schedule in accordance with agency leave policy and performs other duties as assigned.

1. Security and Risk Management Services (30%)

• Provides security and risk management services by performing risk identification, assessment, and remediation, as well as regulatory and internal compliance monitoring; uses established standards and processes to adequately protect Health and Human Services (HHS) personnel, facilities, cloud infrastructure, information, and business operations.
• Performs cyclical and periodic technology risk assessments of cloud environments such as Microsoft Azure and Amazon Web Services (AWS) and on ‑ premises environments; reviews technology use within business initiatives; conducts web application security analysis, vulnerability analysis, and evaluates emerging threats.
• Facilitates risk assessment sessions with Information Owners and