Cyber-Security Analyst - IS-Security

Minimum Qualifications:

Bachelor's degree and one (1)  year of IT or security experience.  An equivalent combination of education and experience relevant to the role may be considered for this position.

Preferred Qualifications:

• 3 years of cybersecurity experience.
• Python, Rust, C, C+, Java, and/or PowerShell.
• Academic and/or working experience with TCP/IP networking, and networking services such as DNS, SMTP, DHCP, etc.
• Windows, MacOS, Linux-variant operating systems, such as the file system structure, system services, and typical behavior of endpoints and servers
• Cloud-based services such as Microsoft Office 365 and Azure productivity tools.

Job Summary:

The Security Analyst on the Governance, Risk, and Compliance (GRC) team plays a critical role in safeguarding sensitive information resources and data, ensuring organizational compliance with industry regulations. This position supports the development, implementation, and monitoring of security policies, risk management processes, and compliance frameworks such as HIPAA, TAC 202, UTS 165, and NIST cybersecurity standards.

Job Duties:

Under direct supervision, the Security Analyst supports the organization’s information resources, security environments, and applications to ensure they remain adequately protected and aligned with the NIST Cybersecurity Framework (CSF). The role assists in activities across the CSF functions: Identify, Protect, Detect, Respond, and Recover, including supporting asset classification, implementing security controls, monitoring for anomalous activity, and participating in 24/7 incident response processes.

• Complete CompTIA CySA+ certification training and successfully pass the exam within 90 days of hire.
• Work assigned shifts supporting 24x7x365 Tier 1 SOC operations.
• Perform alert triage across on-premises and cloud security technologies, including SIEM, IDS, antivirus, cloud services, Windows servers, network infrastructure, DLP, UBA, and user-submitted security reports.
• Apply basic security controls to contain malicious activity and prevent unauthorized disclosure of sensitive information.
• Escalate alerts to Tier 2 based on severity and priority, supporting follow-on incident response activities.
• Contribute to SOC workflow improvements by identifying false positives and recommending process enhancements.
• Assist with incident response through resolution and help develop after-action reports.
• Participate in ongoing skill development to strengthen investigation and response capabilities.
• Adhere to internal controls, reporting structures, and all applicable standards, processes, and procedures.
• Perform other related duties as assigned by management.
   

Working Environment:

Any qualifications to be considered as equivalents in lieu of stated minimums require the prior approval of the Chief Human Resources Officer or designee. The University of Texas Medical Branch at Galveston is an Equal Opportunity / Affirmative Action University. Specific job requirements or physical location of some positions allocated to this classification may render this position security sensitive, and thereby subject to the provisions of Section 51.215, Texas Education Code.  

To the extent this position qualifies as a position that researches, works on, or has access to critical infrastructure as defined in Section 117.001(2) of the Texas Business and Commerce Code, there is a requirement for any applicant, employee, or contractor to have the ability to maintain the security or integrity of the infrastructure. Therefore, if applicable, anyone hired in this position or continued to be employed in this position must be routinely reviewed to determine whether they are able to maintain the security or integrity of the infrastructure.

Salary Range:

Actual salary commensurate with experience.

Work Schedule:

Remote local position, rotating shifts, including nights and weekends.

Equal Employment Opportunity

UTMB Health strives to provide equal opportunity employment without regard to race, color, religion, age, national origin, sex, gender, sexual orientation, gender identity/expression, genetic information, disability, veteran status, or any other basis protected by institutional policy or by federal, state or local laws unless such distinction is required by law. As a Federal Contractor, UTMB Health takes affirmative action to hire and advance protected veterans and individuals with disabilities.