Cybersecurity Analyst — Public Sector Incident Lead

Cybersecurity Jobs; Cedar Hill (TX); On-site; USD 70,000 - 100,000; Full time

Benefits offered by this job

Health Plan

Dental Plan

Vision Plan

TMRS Retirement Plan

Educational reimbursement

Library card

EAP

Job summary

The City of Cedar Hill, TX is seeking a Cybersecurity Analyst to strengthen its security posture, manage risk, and lead day-to-day cybersecurity operations.

The role will monitor SIEM and MDR platforms, review threats, maintain security dashboards, and support identity protection across Microsoft 365 and Defender while ensuring CJIS compliance and security best practices. Collaborate with IT staff to ensure secure solutions and participate in audits and training.

Qualifications

• Bachelor’s degree in Cybersecurity/IT/CS or equivalent.
• Minimum 3 years of relevant cybersecurity experience.
• Local government experience preferred.
• Active continuing education and related certifications encouraged.
• CJIS clearance eligibility required or pursued.

Responsibilities

• Monitor security events with SIEM and MDR platforms.
• Analyze indicators of compromise and escalate incidents as needed.
• Maintain security dashboards, reports, and metrics.
• Coordinate incident response activities and document findings.
• Administer AD and Entra ID access controls and MFA policies.
• Support security across Microsoft 365 services and Defender.
• Investigate phishing, malware, and unauthorized access incidents.
• Participate in audits, risk assessments, and remediation tracking.
• Provide cybersecurity awareness training and simulations.

Skills

Cybersecurity knowledge

Incident response

Risk assessment

Communication

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

SIEM

MDR platforms

Microsoft Active Directory

Microsoft Entra ID

Microsoft 365

Microsoft Defender

Exchange Online

SharePoint

Job description

The City of Cedar Hill, TX is seeking a Cybersecurity Analyst to strengthen its security posture, manage risk, and lead day-to-day cybersecurity operations.

The role will monitor SIEM and MDR platforms, review threats, maintain security dashboards, and support identity protection across Microsoft 365 and Defender while ensuring CJIS compliance and security best practices. Collaborate with IT staff to ensure secure solutions and participate in audits and training.