Cybersecurity Analyst

The Texas Workforce Commission is seeking a Cybersecurity Analyst to support secure operations in Austin, Texas. In this role, you will analyze high-volume security log data across multi-cloud and on-premise environments, investigate potential cyber threats, and preserve evidence in line with federal audit expectations. The position operates with minimal supervision and requires clear communication of technical risk to non-technical stakeholders while maintaining strict confidentiality for sensitive state investigations.

What you’ll do

• Analyze diverse, high-volume security log data from multi-cloud and on-premise environments.
• Distinguish false positives from sophisticated, multi-stage cyber threats.
• Investigate incidents by reverse-engineering attack vectors, analyzing malware, and correlating disparate data points to identify root causes while preserving evidence according to federal audit standards.
• Operate under minimal supervision with broad latitude for independent judgment and initiative.
• Independently prioritize daily operations and select investigation methods based on threat severity.
• Communicate highly technical risk concepts clearly to non-technical stakeholders.
• Maintain absolute confidentiality regarding sensitive state investigations.
• Perform other related duties as assigned.

Required qualifications

• Eight (8) years of full-time experience in cybersecurity analysis, information security analysis, or digital forensics.
• Certification as a SANS GIAC Information Security Professional (GISP), Certified Information Security Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), Certified Information System Security Professional (CISSP), or equivalent senior-level cybersecurity certification.
• Must be a Texas resident to work for the Texas Workforce Commission or willing to relocate to Texas.
• No employment visa sponsorship now or in the future for this position (including individuals currently on H-1B, F-1 (OPT/CPT), or H-4 visas).
• Upon hire, must verify identity and eligibility to work in the United States and complete the required employment eligibility verification form in accordance with federal law.

Tools and technologies

• NIST CSF; MITRE ATT&CK; NIST SP 800-53 Rev. 5; TAC §202; IRS Pub 1075; CJIS.
• Enterprise SIEM and SOAR; PCAPs; EDR and endpoint detection and response.
• Automated orchestration methodologies; Sigma rules; YARA.

Benefits

• Family Friendly Certified Workplace
• Competitive salary: $10,091.92/month
• Defined Retirement Benefit Plan
• Optional 401(k) and 457 accounts
• Medical Insurance
• Paid time off, including vacation, sick, and family care leave
• Additional benefits for active employees:

Knowledge, skills, and abilities

• Knowledge of advanced cybersecurity frameworks (NIST CSF, MITRE ATT&CK, NIST SP 800-53 Rev. 5, TAC §202), federal protection standards including IRS Pub 1075 and CJIS, network security architecture, protocols, and routing, and automated orchestration methodologies.
• Skill in querying and configuring enterprise SIEM and SOAR platforms, analyzing raw packet captures (PCAPs), deploying EDR tools, and developing automation logic for security playbooks.
• Ability to analyze complex technical data under high-pressure scenarios, communicate technical risk to non-technical stakeholders, and maintain absolute confidentiality regarding sensitive state investigations.

Preferred qualifications

• Seven (7) or more years of experience in cybersecurity analysis, including experience managing compliance audits and investigations within a State of Texas agency.
• Experience authoring automated SOAR playbooks or writing custom detection logic (Sigma rules, YARA).

Location: Austin, TX (onsite). Primary location: United States-Texas-Austin. Work address: 1117 Trinity St, Austin, TX 78701-1919. Schedule: Full-time, regular, standard, non-management. Travel: Yes (10% of the time). Work from home: No. Posting date: Sep 19, 2026.