Cybersecurity Analyst

City of Sugar Land•2700 Town Center Blvd Sugar Land, TX

3d•Onsite

About The Position

The Cybersecurity Analyst is a non-exempt position responsible for ensuring the organization's technology infrastructure remains secure, resilient, compliant, and protected against evolving cybersecurity threats. This role works in collaboration with IT Operations. The City of Sugar Land is known for its high quality of life and commitment to innovation, with a team driven by service, collaboration, and a shared goal of making the community better. Employees are empowered to make an impact, enjoy strong benefits, and have opportunities for career growth.

Requirements

A Bachelor’s Degree in Computer Science, Engineering or other relevant STEM field or equivalent technical training backed by industry recognized credentials and certifications.
Three years of information technology experience with an emphasis on infrastructure and operations.
Experience in Cisco security and firewall applications and appliances.
Experience in Fortinet security applications and appliances.
Experience with XDR/MDR, SIEM, NAC, IPS/IDS, IAM, and MFA.
Valid Texas Class “C” Driver License.
Must be eligible to obtain and maintain Criminal Justice Information Services (CJIS) clearance.
3–5 years of hands-on experience managing and securing enterprise networks and systems.
Proven experience with Cisco XDR, Cisco Firepower, Cisco ASA, Cisco Endpoint.
Proven experience with Fortinet Gateways.
Proven experience with Duo MFA.
Proven experience with Server and Network Hardening.
Proven experience with Disaster Recovery implementation and testing.
Strong understanding of TCP/IP, VPNs, IDS/IPS, and secure network design principles.
Familiarity with incident response, threat intelligence, and vulnerability management processes.
Cisco certifications such as CCNA, CCNP (Enterprise, Security, or equivalent).

Responsibilities

Implement, configure, and manage Cisco XDR, Cisco Endpoint Security, and Fortinet Gateways for proactive threat detection and response.
Monitor network and endpoint activities for security incidents using SIEM and XDR tools.
Investigate, analyze, and respond to security breaches, threats, and vulnerabilities.
Manage and maintain Cisco Firepower and Cisco ASA firewalls.
Administer Duo Multi-Factor Authentication (MFA).
Perform network hardening to reduce the attack surface.
Conduct server hardening across Windows and Linux systems.
Review and implement secure configurations, patch management, and vulnerability remediation.
Participate in DR drills and testing.
Maintain up-to-date documentation of network security configurations, standards, and incident response procedures.
Support compliance initiatives (e.g., NIST, ISO 27001, or CIS Controls) through audits and reporting.
Work as an essential employee before, during, and after an emergency or disaster.
Stay abreast of, and comply with, all City and departmental policies and procedures.
Perform other duties and responsibilities as assigned.