Systems Analyst 3

Job Title

Understands business objectives and problems, identifies alternative solutions, performs studies and cost/benefit analysis of alternatives. Analyzes user requirements, procedures, and problems to automate processing or to improve existing computer system: Confers with personnel of organizational units involved to analyze current operational procedures, identify problems, and learn specific input and output requirements, such as forms of data input, how data is to be; summarized, and formats for reports. Writes detailed description of user needs, program functions, and steps required to develop or modify computer program. Reviews computer system capabilities, specifications, and scheduling limitations to determine if requested program or program change is possible within existing system.

Additional job details and special considerations

Supports TIERS Operations, AWS Cloud Migration and TIERS Cloud Migration's Authority to Connect project by applying information security threat intelligence to identify and exploit vulnerabilities within different environments. On a daily basis you will perform analysis of on-prem and cloud security and operations related to security. Our ideal candidate has experience working in a large operations and development environments and is knowledgeable about custodian artifacts that are regulatory requirements. In this role you will assist IT operations and development teams to meet industry standards, and be proficient with the latest cybersecurity software. On a daily basis interacts with all aspects of IT responsible for the management of DevSecOps. Requires knowledge of infrastructure in IT operations including understanding of databases and system administration. This position may be required to come to the office once a week or more.

Candidate Skills and Qualifications

Minimum Requirements: Candidates that do not meet or exceed the minimum stated requirements (skills/experience) will be displayed to customers but may not be chosen for this opportunity.

Years - Required/Preferred - Experience

8 - Required - Coordinates and executes security policies and controls, as well as assess vulnerabilities within the company.

8 - Required - Experience with data and network security processing, security systems management, and security violation investigation.

8 - Required - On a daily basis performs analysis of on-prem and cloud security operations and works with DevSecOps teams with delivery of security related activities including audits, documentation, and reporting.

8 - Required - Understands regulatory requirements, has in-depth knowledge of industry standards and trends, and is proficient with the latest cybersecurity software. Works with DevSecOps and custodians.

8 - Required - Experience with managing various projects and ability to plan and oversees all aspects of the projects.

8 - Required - Strong ability to identify problems/issues, analyze and evaluate alternatives and recommend/implement effective solutions.

8 - Required - Orchestrate calls to include, but not limited to project kick-off calls, notification of high/critical findings during the testing process, and close out calls to review test findings, evidence, process steps to reproduce, and remediation recommendations.

8 - Required - Experience implementing security measures to protect computer systems, networks and data. Information security analysts are expected to stay up to date on the latest intelligence, including hackers’ methodologies, in order to anticipate breaches.

8 - Required - Extensive experience with working with and implementing NIST 800-37, NIST 800-53, MARS-E controls, POA&Ms, and developing Corrective Action Plans.

8 - Required - Review violations of computer security procedures and discuss procedures with HHSC/TIERS Security team. Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.

8 - Required - Experience with Security web application firewalls.

8 - Required - Experience with managing conflict and resolving issues at managerial levels.

8 - Required - Experience with reviewing and coordinating audit responses, evidence gathering, and plan of actions. Experience collaborating with IT departments to coordinate audit responses.

5 - Preferred - Skilled information technology professional with advanced experience developing and implementing IT policy, standards and procedures.

4 - Preferred - Experience in delivering technical training in cloud-based technology is a plus.

4 - Preferred - Experience providing Windows and Linux operating system and application support.

4 - Preferred - Experience with information security risk assessments.

4 - Preferred - Experience with security governance and documentation and security plan documents.

4 - Preferred - In-depth knowledge of AWS Cloud Security preferred.

4 - Preferred - In depth knowledge and hand on experience on AWS Cloud Security preferred or experience with other Cloud service providers.

3 - Preferred - Experience ITIL - ticketing using Remedy and ServiceNow.

3 - Preferred - Ability to training staff on network and information security procedures, processes and information safeguarding.

3 - Preferred - Experience working with Archer GRC, Dynatrace, Splunk, Imperva Web Application Firewall, Qualys and MS Office tools.

Terms of Service

Services are expected to start on or around April 1, 2025 and are expected to be completed by August 31, 2025. Total estimated hours per Candidate shall not exceed 1000 or less hours for FY25.

Initial Purchase Order Term:

Any Purchase Order resulting from this Request for Resumes is effective on the date of issuance and expires on the last day of the State fiscal year in which the Purchase Order was issued, unless sooner stated in the Purchase Order or unless sooner terminated, renewed, or extended as provided in the Purchase Order.

Renewal Option(s):

HHSC, at its sole discretion, may renew the Purchase Order for up to three, one-year optional renewals. Such renewal(s), if exercised, shall be subject to all the requirements and terms and conditions of the Purchase Order.

Work Hours and Location

A) Services shall be provided during normal business hours unless otherwise coordinated through the Agency. Normal business hours are Monday through Friday from 8:00 a.m. through 5:00 p.m., excluding Texas state holidays when the agency is closed.

B) The primary work location will be 701 W. 51st Street, Austin, TX 78751

Position is hybrid and will be required to work in our Austin Office. Program will only allow candidates who are local. (Surrounding area from Austin, TX).

Position is hybrid. Program will only allow candidates who are within the City of Austin or the surrounding cities. (LOCALS ONLY). 20% travel into the office is required. The tentative workdays are as follows below.

Onsite: Wednesdays (tentative) this can be subject to change.

Remote: Mondays, Tuesdays, Thursdays and Fridays (tentative) this can be subject to change.

C) Any and all travel, per diem, parking, and/or living expenses shall be at the worker’s and/or Vendor’s expense.

D) The worker may be required to work remotely at HHSC discretion, up to 100 percent of the time.

E) The worker may be required to work outside the normal business hours on weekends, evenings and holidays, as requested. Payment for work over 40 hours will be at the hourly rate quoted and must be coordinated and pre-approved through the Agency.

Other Special Requirements

Interviews will be conducted: (check all that apply)

? By Phone

? In person

? Through Microsoft Teams

Important Information

A vendor’s submission of a candidate may be disqualified if:

• The vendor fails to add the candidate to competitive solicitation, or RFR, in the DIR ITSAC Portal.
• Another vendor submits the same candidate for the same competitive solicitation, also known as a request of resume (RFR).
• The vendor submits more than one candidate for the same competitive solicitation, or RFR.
• The vendor submits a candidate after the response period for a competitive solicitation, or RFR.
• The vendor fails to format the email subject line properly, when submitting a candidate for a competitive solicitation, or RFR: Proper Formatting: Solicitation Number, Vendor Name, Candidate First and Last Name, Position Type and Level Example: 529123456, Sanders Technologies, Jane Doe, Project Lead 3
• The vendor fails to follow any other instructions noted in the competitive solicitation, or RFR.