Cybersecurity Analyst II

University of Texas at Austin

2d•$77,930•Onsite

About The Position

The Cybersecurity Analyst II is an intermediate-level professional responsible for developing, maintaining, and enhancing enterprise cybersecurity programs that safeguard organizational systems, networks, and data. Reporting to the Manager of Enterprise IT Security and Operations, the role focuses on program design, documentation, and continuous improvement in alignment with organizational standards. It manages activities in one or more assigned cybersecurity domains—including risk management, incident response, vulnerability management, and threat intelligence—under established frameworks and with guidance, delivering programs of moderate complexity. The position updates policies, procedures, playbooks, runbooks, and automation; aligns security practices with regulatory frameworks; and collaborates with IT and business teams to integrate security requirements into the software development lifecycle and operational processes. It also provides guidance to junior analysts and supports a risk-aware environment through outreach and education.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, with at least 3 years of cybersecurity experience, including incident response, vulnerability management, or threat monitoring.
Demonstrated experience developing cybersecurity programs and associated tooling.
Experience with risk and compliance frameworks such as NIST RMF, NIST CSF, ISO, HITRUST, or NIST 800-53.
Strong knowledge of security protocols, network monitoring, and vulnerability assessment tools.
Demonstrated experience in security incident detection, investigation, and response.
Demonstrated knowledge of network protocols, operating systems, SIEM tools, and ITIL processes.
Relevant education and experience may be substituted as appropriate.

Nice To Haves

At least 5 years of experience in network scanning, cloud security, Risk Management Frameworks, threat intelligence programs, vulnerability management programs, SOAR platforms, or related areas.
Four years of healthcare experience, including knowledge of healthcare missions, HIPAA regulations, and medical device security considerations.
Experience with ServiceNow Security Operations and Security Incident Response modules or similar ITSM platforms.
GIAC Certified Incident Handler (GCIH), Certified Incident Handler (ECIH), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), or CompTIA Security+ certification.

Responsibilities

Design and document policies, standard operating procedures, playbooks, and runbooks for assigned cybersecurity domains, aligning them with organizational standards and regulatory frameworks.
Implement automation and process improvements to strengthen controls and improve efficiency.
Maintain program dashboards and performance metrics, and incorporate lessons learned into program updates.
Collaborate with IT and business stakeholders to integrate security requirements into operational processes and the software development lifecycle.
Coordinate with department IT teams, campus IT, and the Information Security Office to review, implement, and monitor security controls on campus IT- and ISO-managed tools.
Manage investigations and coordinate resolution for security events within scope.
Refine playbooks and runbooks and recommend workflow improvements based on lessons learned.
Automate repetitive operational tasks such as enrichment, triage, alerts, and notifications.
Apply policies and procedures, perform control testing, and gather audit evidence.
Monitor adherence to HIPAA, FERPA, PCI DSS, GDPR, ISO 27001, and NIST frameworks.
Update risk registers, propose mitigations, and track remediation through closure.
Conduct third-party and vendor security assessments and document follow-ups.
Help facilitate awareness initiatives and tabletop exercises and provide coaching during activities.
Maintain dashboards and KPIs, including MTTR, vulnerability SLA compliance, and control health.
Prepare reports with actionable recommendations for stakeholders and leadership.
Partner with IT and project teams to embed security requirements into designs and changes and review changes for security impact.
Maintain cybersecurity documentation, including architecture diagrams, SOPs, and inventories.
Represent the organization during audits and external assessments as assigned.
Participate in professional development and advanced training.
Support disaster recovery and business continuity plan updates.
Adhere to internal controls and the reporting structure, and perform related duties as required.