Cybersecurity Analyst

Port Corpus Christi Authority Cybersecurity Position

Port Corpus Christi Authority (PCCA) is currently seeking a dynamic professional to join our team! This position will monitor, analyze, and protect PCCA's information systems, networks, applications, devices, and data, and support the development, implementation, and operation of cybersecurity technologies, policies, standards, and procedures designed to reduce organizational risk and protect Port operations. This position will also identify and investigate cybersecurity threats and vulnerabilities, support incident response and recovery activities, and assist with maintaining compliance with applicable legal, regulatory, and industry requirements. This position will also evaluate emerging technologies and risks, including artificial intelligence, cloud services, operational technology, automation, and zero trust technologies within PCCA's information technology and operational environments; while providing support to the Cybersecurity Manager.

Essential Functions:

• Plans, coordinates, implements, and monitors cybersecurity measures designed to protect PCCA's data, systems, applications, networks, and technology infrastructure
• Participates in assigned after-hours and on-call rotations and responds to cybersecurity incidents, security alerts, and operational emergencies outside normal business hours, including evenings, weekends, and holidays, as required
• Develops, reviews, and maintains cybersecurity policies, standards, procedures, and technical documentation based on organizational requirements and industry best practices
• Monitors computer systems, networks, security technologies, and user activity to identify threats, vulnerabilities, unauthorized access, and potential policy violations
• Promotes and evaluates compliance with PCCA cybersecurity policies, standards, procedures, and applicable legal, regulatory, and contractual requirements
• Designs, configures, tests, and evaluates security controls for hardware, software, operating systems, networks, cloud services, and other technology environments
• Develops and delivers cybersecurity awareness training to PCCA personnel to promote secure practices and reduce organizational risk
• Supports continuous security monitoring, threat hunting, incident response, vulnerability management, and digital investigations across information technology, operational technology, cloud, and mobile environments
• Assesses cybersecurity, privacy, data-protection, and operational risks associated with artificial intelligence systems and AI-enabled technologies
• Assists with cybersecurity risk assessments, audits, regulatory compliance, and security documentation supporting ISO 27001, NIST, CJIS, and applicable U.S. Coast Guard maritime cybersecurity requirements
• Conducts internal and external security assessments to identify vulnerabilities, insecure configurations, unauthorized file shares, data leakage, and other security weaknesses
• Audits servers, endpoints, applications, and other technology systems to identify noncompliance and cybersecurity risks and coordinates with appropriate teams to remediate findings
• Conducts research on emerging technologies, cybersecurity threats, and industry practices through professional development, technical publications, training, and other relevant sources and recommends appropriate improvements
• Supports cybersecurity incident response, business continuity, and disaster recovery planning, testing, and operations
• Operates and supports information technology and security systems, including VMware, vSAN, file servers, SQL database applications, endpoint devices, local area networks, wide area networks, and wireless technologies
• Defines technical and cybersecurity issues, conducts research, evaluates alternatives, and develops sound, independent conclusions and recommendations
• CPR certified or the ability to become CPR certified within the first year of employment
• Tier 2 status designation

Candidate Profile:

The preferred candidate for this position should demonstrate sound judgment, discretion, and integrity when handling sensitive, confidential, law-enforcement, or security-related information; be analytical, detail-oriented, innovative, and a problem solver, expected to possess exceptional work ethic and integrity, and ability to communicate effectively with the public, PCCA stakeholders, and staff; maintain composure and communicate effectively during cybersecurity incidents and other time-sensitive operational events; and work collaboratively across information technology, operational departments, Port Police, vendors, and external government partners, and be a disciplined individual with a focus on maintaining optimal integrity in support of the PCCA. They must possess the following:

Education & Credentials:

• Associate's or Bachelor's degree from an accredited college or university in Information Technology, Information Systems, or Computer Science
• Related field experience
• Cybersecurity and network certifications such as CCNA, CCNP, CompTIA Security+, CySA+, GIAC, CEH, CISSP, CISM, or equivalent are preferred
• Ability to complete required cybersecurity, maritime-security, emergency-response, and regulatory training during employment
• Ability to obtain and maintain applicable government security clearances, if required
• Ability to obtain and maintain a Transportation Worker Identification Credential (TWIC) during course of employment
• Valid driver's license

Experience & Job Knowledge:

• Strong technical knowledge of cybersecurity, enterprise networking, information systems, and security operations
• Experience administering or supporting security controls across cloud, identity, Zero Trust, endpoint, network, email, web, Domain Name System (DNS), and data-security environments
• Experience with identity and access management, multifactor authentication, endpoint detection and response, vulnerability management, data loss prevention, and security automation technologies
• Experience developing, implementing, and maintaining secure baseline configurations for enterprise systems, applications, network devices, and endpoints
• Experience using Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), endpoint-protection, and other security-monitoring technologies
• Knowledge of artificial intelligence, generative AI, machine learning, AI governance, and the cybersecurity, privacy, and data-protection risks associated with these technologies
• Experience analyzing threat intelligence, indicators of compromise, security alerts, system logs, and other technical information to identify and investigate potential cybersecurity incidents
• Working knowledge of firewalls, routers, network switches, encryption, access controls, anti-malware technologies, Voice over Internet Protocol (VoIP), and local, wide-area, and wireless network architectures
• Knowledge of Microsoft Active Directory, cloud services, desktop and server operating systems, computer hardware, software applications, and basic programming or scripting concepts
• Ability to prepare clear and accurate cybersecurity incident reports, investigation summaries, technical documentation, risk assessments, and briefings for technical and nontechnical audiences
• Experience supporting geographically distributed systems (i.e. cloud-based) and working effectively in a collaborative, team-oriented environment
• Experience supporting maritime intelligence, threat intelligence, maritime cybersecurity, operational technology, or critical-infrastructure security is preferred but not required
• Excellent analytical, problem-solving, and interpersonal communication skills
• Five years of experience performing duties substantially similar to those described in this position is preferred. An equivalent combination of education, training, certifications, and relevant professional experience may be considered

Technical Skills:

• Ability to fit well within an energetic and dedicated team and be responsive/responsible to supervision
• Ability to communicate effectively in English, both verbally and in writing, and to read, interpret, and carry out technical instructions, policies, procedures, and other job-related documentation
• Strong organizational and time-management skills, including the ability to prioritize competing responsibilities and manage multiple assignments
• Effective interpersonal, collaboration, critical-thinking, and problem-solving skills
• Ability to analyze security logs, alerts, network traffic, threat intelligence, and endpoint activity to identify and investigate suspicious or potentially malicious behavior
• Ability to automate routine cybersecurity tasks using scripting, security orchestration, application programming interfaces, and similar technologies
• Ability to document cybersecurity incidents, investigations, risks, technical findings, and remediation recommendations and to prepare security briefings for technical, executive, and nontechnical audiences
• Ability to configure, operate, and troubleshoot computer hardware, software, security technologies, networked systems, and related electronic equipment
• Ability to evaluate how changes in technology, operating conditions, business processes, and the threat environment may affect system security and organizational risk
• Ability to apply logic and sound judgment when evaluating technical information, alternative solutions, conclusions, and recommended courses of action
• Ability to prepare, review, revise, and edit clear, concise, and accurate reports, correspondence, procedures, technical documentation, and other written materials
• Proficiency with Microsoft 365 applications, including Word, Excel, Outlook, PowerPoint, Teams, and related productivity and collaboration tools
• Ability to operate standard office equipment and drive a lightweight highway vehicle to meetings and work-related events