Cybersecurity Analyst II

Position Overview

The Cybersecurity Analyst II is an intermediate-level professional responsible for developing, maintaining, and enhancing enterprise cybersecurity programs to safeguard organizational systems, networks, and data. Reporting to the Manager of Enterprise IT Security and Operations, this role focuses on program design, documentation, and continuous improvement aligned with regulatory frameworks such as HIPAA, FERPA, PCI DSS, GDPR, ISO 27001, and NIST. The position involves updating policies, procedures, playbooks/runbooks, and automation to boost both efficiency and effectiveness while guiding junior analysts and collaborating with various IT and business teams.

Location: AUSTIN, TX
Schedule: 40 hours per week
Salary: $78,000+ depending on qualifications

Key Responsibilities

• Develops and maintains cybersecurity programs by designing and documenting policies, standard operating procedures, playbooks, and runbooks for domains such as risk management, incident response, vulnerability management, and threat intelligence.
• Executes cybersecurity operations by managing investigations, refining playbooks/runbooks, and implementing automation for repetitive tasks.
• Supports governance, risk, and compliance activities by applying policies, performing control testing, monitoring regulatory adherence, and conducting third-party assessments.
• Reports on key performance indicators such as MTTR and vulnerability SLA compliance, and collaborates with IT and project teams to integrate security requirements into operational and SDLC processes.
• Maintains cybersecurity documentation, participates in audits and external assessments, and supports disaster recovery and business continuity planning.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 3 years of proven experience in developing security risk management programs and associated tooling.
• Proven experience with Risk Management Frameworks (NIST RMF, ISO).
• Strong knowledge of security protocols, network monitoring, and vulnerability assessment tools.
• Demonstrated experience in security incident detection, investigation, and response.
• Familiarity with network protocols, operating systems, SIEM tools, and ITIL processes.
• Experience with compliance frameworks such as NIST CSF, NIST 800-53, and HITRUST. Relevant education and experience may be substituted as appropriate.

Preferred Qualifications

• Master’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Minimum 4 years of healthcare experience, with demonstrated understanding of healthcare missions, HIPAA regulations, and medical device security.
• Minimum 8 years of experience with network scanning, cloud security, Risk Management Frameworks, threat intelligence programs, vulnerability management programs, and SOAR platforms.
• Preferred certifications such as GIAC Certified Incident Handler (GCIH), Certified Incident Handler (ECIH), CISSP, CISM, CEH, or CompTIA Security+.
• Experience with ServiceNow Security Operations and Security Incident Response modules or similar ITSM platforms.

Benefits & Perks

• Salary: $78,000+ depending on qualifications
• Benefits: Standard office equipment, TRS retirement plan eligibility, and comprehensive health and safety protections
• Schedule: 40 hours per week
• Location: AUSTIN, TX