Senior Cybersecurity Analyst - Multi-Cloud & Forensics (TX)

Texas Workforce Commission; Austin (TX); On-site; USD 108,000 - 132,000; Full time

Benefits offered by this job

Family Friendly

Competitive salary

Retirement plan

401(k) options

Medical insurance

Paid time off

Travel up to 10%

Job summary

Texas Workforce Commission in Austin is seeking a Cybersecurity Analyst III to analyze security log data from multi-cloud and on-premise environments. You will distinguish false positives from complex threats, reverse-engineer attack vectors, and preserve evidence according to federal standards.

The role requires strong SIEM/SOAR, EDR, and automation skills, with the ability to communicate risk to non-technical stakeholders and prioritize investigations independently.

Qualifications

• Eight years of full-time cybersecurity analysis experience.
• Relevant academic credits may count toward qualifications for this position.
• Certifications required: CISSP or equivalent senior-level cybersecurity certification.
• Experience analyzing multi-cloud and on-premise environments.

Responsibilities

• Analyze diverse, high-volume security logs across multi-cloud and on-prem environments.
• Differentiate between false positives and sophisticated threats; identify root causes.
• Reverse-engineer attack vectors, analyze malware, and preserve evidence per federal standards.
• Prioritize daily investigations and dictate methodologies based on threat severity.

Skills

NIST CSF

MITRE ATT&CK

NIST SP 800-53 Rev.5

CJIS

IRS Pub 1075

EDR

SOAR

Education

CISSP

CISM

GIAC GISP

CISA

CRISC

Tools

SIEM

SOAR

EDR

PCAP analysis

Job description

Texas Workforce Commission in Austin is seeking a Cybersecurity Analyst III to analyze security log data from multi-cloud and on-premise environments. You will distinguish false positives from complex threats, reverse-engineer attack vectors, and preserve evidence according to federal standards.

The role requires strong SIEM/SOAR, EDR, and automation skills, with the ability to communicate risk to non-technical stakeholders and prioritize investigations independently.