Cybersecurity Analyst

Cyber Security Analyst *** Houston, Texas onsite work required. Candidates available to move immediately will be considered. This is an expected 6-month client contract-to-hire position.*** Candidate must be local on reporting date and willing to work at 1100 Louisiana St, Houston, TX 77002 Workdays & Hours: MONDAY – FRIDAY 8:00 AM – 5:00 PM Subject to Change Description Of Duties / Essential Functions Duties, functions, and responsibilities of this position include 4+ years experience with the following: Supports Houston Public Works (HPW) specific cyber security initiatives through both predictive and reactive analysis Performs Operational Technology (OT), Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) systems threat and vulnerability assessments and provides subject matter expertise on appropriate threat mitigation approaches Responsible for implementing an ICS Framework approach to facilitate the secure implementation and management of critical HPW systems Responsible for communicating cyber risks and recommendations to mitigate risks to the COH CISO, COH CIO and HPW Director Ensure HPW system vulnerabilities are managed and mitigated per COH Cyber Division policy Ensure proper protections, technical and physical controls are in place to protect HPW assets based on cyber industry standards (e.g., NIST 800-82) Work with COH Cyber Division on the integration of existing HPW cyber capability and monitoring into the COH Security Operations Center (SOC) Identifies intrusion activity by leveraging alert data from multiple sensors and systems and determines priority for response Monitors, evaluates, and assist with the maintenance of assigned security systems in accordance with industry best practices to safeguard internal information systems and databases Uses attack signatures and tactics, techniques and procedures (TTPs) to aid in threat detection and discovery Conducts basic malware analysis of attacker tools and identifies indicators of compromise (IOC)s Manage the SOC mailbox, and monitor and analyze the emails for threats including phishing and malware, and escalates per procedures Participates in the investigations of information security incidents and may prepare reports on intrusions as required Maintains an understanding of the current threats, vulnerabilities, response and mitigation strategies used to support cyber security operations Logs and records all security incidents to internal ticketing system Education Requirements Associate degree in Computer Science, Management and Information Systems (MIS), Business or a related field. System-specific technical certifications may be considered a substitution for associate degree. Experience in IT security, infrastructure or applications may be substituted for the education requirement on a year-for-year basis. Preferences The candidate must have the following knowledge, skills and abilities: Knowledgeable of Cyber Kill Chain and Diamond Model of Intrusion Analysis Knowledge of SIEM, IDS, anti-virus/anti-malware and firewall technologies Understanding of networking and TCP/IP Experience with a wide variety of operating systems: Windows Server, Windows 10, Windows 7, Linux etc. My3Tech Inc