Cybersecurity Analyst

Cybersecurity Analyst

Location: Houston, TX 77002

Duration: 6 months contract to hire

Description of Duties/Essential Functions:

Duties, functions, and responsibilities of this position include 4+ years’ experience with the following:

• Supports Houston Public Works (HPW) specific cyber security initiatives through both predictive and reactive analysis
• Performs Operational Technology (OT), Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) systems threat and vulnerability assessments and provides subject matter expertise on appropriate threat mitigation approaches
• Responsible for implementing an ICS Framework approach to facilitate the secure implementation and management of critical HPW systems
• Responsible for communicating cyber risks and recommendations to mitigate risks to the COH CISO, COH CIO and HPW Director
• Ensure HPW system vulnerabilities are managed and mitigated per COH Cyber Division policy
• Ensure proper protections, technical and physical controls are in place to protect HPW assets based on cyber industry standards (e.g., NIST 800-82)
• Work with COH Cyber Division on the integration of existing HPW cyber capability and monitoring into the COH Security Operations Center (SOC)
• Identifies intrusion activity by leveraging alert data from multiple sensors and systems and determines priority for response
• Monitors, evaluates, and assist with the maintenance of assigned security systems in accordance with industry best practices to safeguard internal information systems and databases
• Uses attack signatures and tactics, techniques and procedures (TTPs) to aid in threat detection and discovery
• Conducts basic malware analysis of attacker tools and identifies indicators of compromise (IOC)s
• Manage the SOC mailbox, and monitor and analyze the emails for threats including phishing and malware, and escalates per procedures
• Participates in the investigations of information security incidents and may prepare reports on intrusions as required
• Maintains an understanding of the current threats, vulnerabilities, response and mitigation strategies used to support cyber security operations
• Logs and records all security incidents to internal ticketing system

Education Requirements:

Associate degree in Computer Science, Management and Information Systems (MIS), Business or a related field. System-specific technical certifications may be considered a substitution for associate degree.

Experience in IT security, infrastructure or applications may be substituted for the education requirement on a year-for-year basis.

Preferences:

• Knowledgeable of Cyber Kill Chain and Diamond Model of Intrusion Analysis
• Knowledge of SIEM, IDS, anti-virus/anti-malware and firewall technologies
• Understanding of networking and TCP/IP
• Experience with a wide variety of operating systems: Windows Server, Windows 10, Windows 7, Linux etc.