Cybersecurity Analyst

Port Of Corpus Christi Authority•Corpus Christi, TX

1d•Onsite

About The Position

Port Corpus Christi Authority (PCCA) is currently seeking a dynamic professional to join our team! This position will monitor, analyze, and protect PCCA’s information systems, networks, applications, devices, and data, and support the development, implementation, and operation of cybersecurity technologies, policies, standards, and procedures designed to reduce organizational risk and protect Port operations. This position will also identify and investigate cybersecurity threats and vulnerabilities, support incident response and recovery activities, and assist with maintaining compliance with applicable legal, regulatory, and industry requirements. This position will also evaluate emerging technologies and risks, including artificial intelligence, cloud services, operational technology, automation, and zero trust technologies within PCCA’s information technology and operational environments; while providing support to the Cybersecurity Manager.

Requirements

Associate’s or Bachelor’s degree from an accredited college or university in Information Technology, Information Systems, or Computer Science Related field
Strong technical knowledge of cybersecurity, enterprise networking, information systems, and security operations
Experience administering or supporting security controls across cloud, identity, Zero Trust, endpoint, network, email, web, Domain Name System (DNS), and data-security environments
Experience with identity and access management, multifactor authentication, endpoint detection and response, vulnerability management, data loss prevention, and security automation technologies
Experience developing, implementing, and maintaining secure baseline configurations for enterprise systems, applications, network devices, and endpoints
Experience using Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), endpoint-protection, and other security-monitoring technologies
Knowledge of artificial intelligence, generative AI, machine learning, AI governance, and the cybersecurity, privacy, and data-protection risks associated with these technologies
Experience analyzing threat intelligence, indicators of compromise, security alerts, system logs, and other technical information to identify and investigate potential cybersecurity incidents
Working knowledge of firewalls, routers, network switches, encryption, access controls, anti-malware technologies, Voice over Internet Protocol (VoIP), and local, wide-area, and wireless network architectures
Knowledge of Microsoft Active Directory, cloud services, desktop and server operating systems, computer hardware, software applications, and basic programming or scripting concepts
Ability to prepare clear and accurate cybersecurity incident reports, investigation summaries, technical documentation, risk assessments, and briefings for technical and nontechnical audiences
Experience supporting geographically distributed systems (i.e. cloud-based) and working effectively in a collaborative, team-oriented environment
Ability to fit well within an energetic and dedicated team and be responsive/responsible to supervision
Ability to communicate effectively in English, both verbally and in writing, and to read, interpret, and carry out technical instructions, policies, procedures, and other job-related documentation
Strong organizational and time-management skills, including the ability to prioritize competing responsibilities and manage multiple assignments
Effective interpersonal, collaboration, critical-thinking, and problem-solving skills
Ability to analyze security logs, alerts, network traffic, threat intelligence, and endpoint activity to identify and investigate suspicious or potentially malicious behavior
Ability to automate routine cybersecurity tasks using scripting, security orchestration, application programming interfaces, and similar technologies
Ability to document cybersecurity incidents, investigations, risks, technical findings, and remediation recommendations and to prepare security briefings for technical, executive, and nontechnical audiences
Ability to configure, operate, and troubleshoot computer hardware, software, security technologies, networked systems, and related electronic equipment
Ability to evaluate how changes in technology, operating conditions, business processes, and the threat environment may affect system security and organizational risk
Ability to apply logic and sound judgment when evaluating technical information, alternative solutions, conclusions, and recommended courses of action
Ability to prepare, review, revise, and edit clear, concise, and accurate reports, correspondence, procedures, technical documentation, and other written materials
Proficiency with Microsoft 365 applications, including Word, Excel, Outlook, PowerPoint, Teams, and related productivity and collaboration tools
Ability to operate standard office equipment and drive a lightweight highway vehicle to meetings and work-related events
Ability to understand, interpret and apply PCCA policies, SEAPORT values, state/federal laws
Ability to perform essential job functions, including but not limited to frequent standing, walking, sitting, speaking or hearing, typing and occasional reaching, stooping, kneeling, lifting and/or moving up to 20 pounds with or without reasonable accommodation
Must be able to walk and stand on level and/or inclined, climb stairs, ramps, ladders and work stands.
Must be able to crouch, crawl, grasp/handle objects, use finger dexterity, bend elbow/knee and reach above/below shoulders
Ability to work in a general office environment, and on a work site with exposure to adverse weather conditions, fumes and /or air particulates, working in high precarious places, risk of electrical shock and moving mechanical parts, moderate noise levels and working at heights, ability to wear personal protective equipment, including hard hat, steel toed footwear, eye and hearing protection when performing work functions
Communicating verbally, in writing and over devices such as phones and mobile phones
Ability to operate mechanical and electrical equipment and light-weight highway vehicles and standard office equipment and to work the requisite hours to fulfill position objectives, including evenings and/or weekends, as needed

Nice To Haves

Cybersecurity and network certifications such as CCNA, CCNP, CompTIA Security+, CySA+, GIAC, CEH, CISSP, CISM, or equivalent are preferred
Ability to complete required cybersecurity, maritime-security, emergency-response, and regulatory training during employment
Ability to obtain and maintain applicable government security clearances, if required
Ability to obtain and maintain a Transportation Worker Identification Credential (TWIC) during course of employment
Experience supporting maritime intelligence, threat intelligence, maritime cybersecurity, operational technology, or critical-infrastructure security is preferred but not required
Excellent analytical, problem-solving, and interpersonal communication skills
Five years of experience performing duties substantially similar to those described in this position is preferred.
An equivalent combination of education, training, certifications, and relevant professional experience may be considered

Responsibilities

Plans, coordinates, implements, and monitors cybersecurity measures designed to protect PCCA’s data, systems, applications, networks, and technology infrastructure
Participates in assigned after-hours and on-call rotations and responds to cybersecurity incidents, security alerts, and operational emergencies outside normal business hours, including evenings, weekends, and holidays, as required
Develops, reviews, and maintains cybersecurity policies, standards, procedures, and technical documentation based on organizational requirements and industry best practices
Monitors computer systems, networks, security technologies, and user activity to identify threats, vulnerabilities, unauthorized access, and potential policy violations
Promotes and evaluates compliance with PCCA cybersecurity policies, standards, procedures, and applicable legal, regulatory, and contractual requirements
Designs, configures, tests, and evaluates security controls for hardware, software, operating systems, networks, cloud services, and other technology environments
Develops and delivers cybersecurity awareness training to PCCA personnel to promote secure practices and reduce organizational risk
Supports continuous security monitoring, threat hunting, incident response, vulnerability management, and digital investigations across information technology, operational technology, cloud, and mobile environments
Assesses cybersecurity, privacy, data-protection, and operational risks associated with artificial intelligence systems and AI-enabled technologies
Assists with cybersecurity risk assessments, audits, regulatory compliance, and security documentation supporting ISO 27001, NIST, CJIS, and applicable U.S. Coast Guard maritime cybersecurity requirements
Conducts internal and external security assessments to identify vulnerabilities, insecure configurations, unauthorized file shares, data leakage, and other security weaknesses
Audits servers, endpoints, applications, and other technology systems to identify noncompliance and cybersecurity risks and coordinates with appropriate teams to remediate findings
Conducts research on emerging technologies, cybersecurity threats, and industry practices through professional development, technical publications, training, and other relevant sources and recommends appropriate improvements
Supports cybersecurity incident response, business continuity, and disaster recovery planning, testing, and operations
Operates and supports information technology and security systems, including VMware, vSAN, file servers, SQL database applications, endpoint devices, local area networks, wide area networks, and wireless technologies
Defines technical and cybersecurity issues, conducts research, evaluates alternatives, and develops sound, independent conclusions and recommendations
CPR certified or the ability to become CPR certified within the first year of employment