1000000557.SENIOR Cybersecurity Analyst.INFO Tech - Security

Secures Dallas County’s information systems and data. Combines enterprise-wide cyber threat detection, incident response, compliance monitoring, and security policy implementation. Supports the County’s hybrid environment by integrating technical security operations with regulatory mandates, including CJIS, HIPAA, and NIST 800-53. Works closely with IT Security Engineering and Compliance teams to defend the Dallas County infrastructure from evolving threats while ensuring adherence to internal and external security requirements.

Responds to and investigates escalated security tickets, requests, alerts, and events.

Performs advanced triage, and coordinates with technical teams to ensure containment, and documents incident response activities.

Supports daily operations of the County’s security infrastructure, including SIEM, endpoint detection and response, and related tooling.

Performs alert tuning, rule validation, and ensures reliable telemetry flow into security platforms.

Conducts proactive threat hunting activities across SIEM, EDR, and available log sources.

Analyzes behavioral patterns and threat intelligence to identify anomalous activity.

Develops hypotheses, executes investigations, and reports findings.

Manages incoming security-related tickets, requests, and inquiries from internal departments. Prioritizes and tracks resolution, provides technical guidance, and ensures timely communication and closure of support cases.

Develops and maintains operational documentation, including incident response runbooks, standard operating procedures (SOPs), technical workflows, and knowledgebase articles.

Ensures documentation is version-controlled and aligned with policy and tool changes.

Participates in IT and security-related projects by providing technical guidance, control implementation support, and input on security design considerations.

Collaborates with Engineering and IT to ensure secure system configurations.

Contributes to the development and maintenance of IT security policies, procedures, and operational standards.

Works with Security Compliance, Engineering, and IT teams to ensure technical controls support Dallas County policies and regulatory requirements.

Performs other duties as assigned.

Education, Experience and Training

Education and experience equivalent to a Bachelor’s degree in Information Systems, Cybersecurity, Computer Science, or job-related field of study.

Six (6) years of IT experience in cybersecurity operations, including roles such as Security Analyst, Security Engineer, or SOC Analyst.

Special Requirements/Knowledge, Skills & Abilities

Must have a valid Texas Driver's License and good driving record.

Will be required to provide a copy of 10-year driving history.

Must maintain a good driving record and remain in compliance with Article II, Subdivision II of Chapter 90 of the Dallas County Code.

“Individuals holding or considered for a position which has, or may have, access to criminal justice databases including the FBI Criminal Justice Information Systems, NCIC/TCIC and similar databases, must pass a national fingerprint-based records check prior to placement in such position and may be denied placement in such positions and/or access to such systems.

Incumbents must also maintain the ability to pass the records check while in the position or until such time that the Commissioners Court and the County Civil Service Commission deem this position no longer has this requirement.”

Physical/Environmental Requirements

Standard office environment. Ability to lift and carry up to 25 lbs. unassisted. Work a 40-hour hybrid work week with on-call availability for two (2) days per month. Sitting for extended periods of time.

Certifications (Preferred)