Edtech.com's Summary

University of Texas at Austin is hiring a Cybersecurity Analyst II. The role builds and maintains enterprise cybersecurity programs for the Dell Medical School, writing the policies, playbooks, and runbooks for domains such as risk management, incident response, vulnerability management, and threat intelligence. The analyst reports to the Manager of Enterprise IT Security and Operations and coaches junior analysts while keeping the program aligned with regulations like HIPAA, FERPA, and NIST.

Highlights

Design and document policies, standard operating procedures, playbooks, and runbooks for assigned cybersecurity domains, and automate repetitive work such as alert enrichment, triage, and notifications.
Manage security investigations end to end and coordinate resolution of security events within scope.
Review, implement, and monitor security controls such as firewalls, DLP, and MFA with department IT, campus IT, and the Information Security Office.
Test controls, gather audit evidence, track compliance with HIPAA, FERPA, PCI DSS, GDPR, ISO 27001, and NIST, and update risk registers through remediation.
Run third-party and vendor security assessments and help lead awareness initiatives and tabletop exercises.
Maintain dashboards and KPIs such as mean time to resolve and vulnerability SLA compliance, and prepare reports with recommendations for leadership.
Hold a Bachelor’s degree in cybersecurity, information technology, computer science, or a related field with at least 3 years of cybersecurity experience, including developing cybersecurity programs and tooling.
Bring experience with risk and compliance frameworks such as NIST RMF, NIST CSF, and ISO, plus knowledge of SIEM tools, network protocols, vulnerability assessment tools, and ITIL processes.
Preferred qualifications include 5 years in areas like cloud security and SOAR platforms, healthcare experience with HIPAA and medical device security, ServiceNow security modules, and certifications such as CISSP, CISM, or Security+.
Salary of $77,930 and up depending on qualifications, for a full-time, 40-hour-per-week exempt position starting immediately.

Cybersecurity Analyst II Full Description

Job Details

Hiring Department: Dell Medical School
Position open to: All Applicants
Weekly scheduled hours: 40
FLSA status: Exempt
Earliest start date: Immediately
Position duration: Expected to continue
Location: UT Main Campus

General Notes

The Cybersecurity Analyst II is an intermediate level professional responsible for developing, maintaining, and enhancing enterprise cybersecurity programs that safeguard organizational systems, networks, and data. Reporting to the Manager of Enterprise IT Security and Operations, this role emphasizes program design, documentation, and continuous improvement in alignment with organizational standards. The position manages activities within one or more assigned cybersecurity domains such as risk management, incident response, vulnerability management, and threat intelligence, executed under established frameworks and with guidance, ensuring effective delivery of programs with moderate complexity. The Cybersecurity Analyst II updates policies, procedures, playbooks/runbooks, and automation to enhance efficiency and effectiveness. The role ensures alignment with regulatory frameworks such as HIPAA, FERPA, PCI DSS, GDPR, ISO 27001, and NIST and collaborates with IT and business teams to integrate security requirements into SDLC and operational processes. Additionally, the Cybersecurity Analyst II provides guidance to junior analysts and supports a risk-aware environment through outreach and education.

Responsibilities

Develops and Maintains Cybersecurity Programs

Designs and documents program components including policies, standard operating procedures, playbooks, and runbooks for one or more assigned cybersecurity domains such as risk management, incident response, vulnerability management, and threat intelligence, ensuring alignment with organizational standards and regulatory frameworks.
Implements automation and process improvements to enhance efficiency, strengthen domain controls, and support continuous improvement.
Maintains dashboards and performance metrics for assigned programs (e.g., SLA compliance, control health) and incorporates lessons learned into program updates.
Collaborates with IT and business stakeholders to integrate security requirements into operational processes and the software development lifecycle.
Coordinates with department IT teams, campus IT, and the Information Security Office (ISO) to review, implement, and monitor security controls on tools managed by campus IT and ISO (e.g., firewalls, DLP, MFA) to safeguard digital infrastructure.

Executes Cybersecurity Operations

Manages investigations end-to-end and coordinates resolution for security events within scope.
Maintains and refines playbooks/runbooks; suggests workflow improvements based on lessons learned.
Implements automations for repetitive tasks (e.g., enrichment, triage, alerts, notifications).

Supports Governance, Risk, and Compliance

Applies policies, standards, and procedures; performs control testing and gathers audit evidence.
Monitors adherence to HIPAA, FERPA, PCI DSS, GDPR, ISO 27001, and NIST frameworks.
Updates risk registers, proposes mitigations, and tracks remediation to closure.
Conducts third-party and vendor security assessments against organizational standards and documents follow-ups.
Helps facilitate awareness initiatives and tabletop exercises; offers coaching during activities.

Reporting & Collaboration

Maintains dashboards and KPIs (e.g., MTTR, vulnerability SLA compliance, control health).
Prepares reports with actionable recommendations for stakeholders and leadership.
Partners with IT and project teams to embed security requirements in designs and changes; reviews changes for security impact.

Marginal or Periodic Functions

Maintains documentation specific to cybersecurity work (architecture diagrams, SOPs, inventories).
Represents the organization during audits and external assessments as assigned.
Participates in professional development and advanced training.
Supports disaster recovery and business continuity plan updates.
Adheres to internal controls and reporting structure.
Performs related duties as required.

Knowledge/Skills/Abilities

Problem Solving: analyzes complex issues methodically and derives practical, evidence-based solutions; correlates multi-source telemetry to isolate root causes; tests alternatives and selects mitigations with minimal disruption; captures decision rationale and lessons learned.
Decision Quality: weighs risk, impact, and tradeoffs to make timely, sound decisions; prioritizes actions using clear severity/risk criteria; commits to reasonable containment steps under uncertainty; communicates next steps and contingencies.
Functional/Technical Skills: solid technical mastery across SIEM/SOAR, endpoint, vulnerability scanners, and core domains; enhances detections and enrichment workflows; executes investigations across OS/network/identity layers; keeps skills current and evaluates tool effectiveness.
Process Management: operates efficient processes with clear handoffs, metrics, and continuous improvement; maintains and streamlines SOPs/runbooks; automates repetitive tasks to reduce MTTR; reviews program performance and suggests refinements.
Dealing with Ambiguity: acts effectively without complete information and adapts as situations evolve; initiates investigation/containment with partial indicators; adjusts approach as new artifacts surface; provides steady guidance during fast-changing events.
Collaborates/Peer Relationships: builds cooperative relationships and gains consensus to advance initiatives; aligns remediation plans with IT/application owners; facilitates cross-team tabletop exercises; escalates diplomatically and closes loops.

Required Qualifications

Requires a Bachelor's Degree in Cybersecurity, Information Technology, Computer Science or related field with at least 3 year(s) of experience in cybersecurity (e.g., incident response, vulnerability management, threat monitoring), including demonstrated experience developing cybersecurity programs and associated tooling.
Experience with risk and compliance frameworks (e.g., NIST RMF, NIST CSF, ISO, HITRUST, NIST 800-53).
Strong knowledge of security protocols, network monitoring, and vulnerability assessment tools.
Demonstrated experience in security incident detection, investigation, and response.
Demonstrated knowledge of network protocols, operating systems, SIEM tools, and ITIL processes.
Relevant education and experience may be substituted as appropriate.

Preferred Qualifications

At least 5 year(s) of experience in network scanning, cloud security, Risk Management Frameworks (RMF), threat intelligence programs, vulnerability management programs, security orchestration, automation, and response (SOAR) platforms.
4 years of healthcare experience, including demonstrated knowledge of healthcare mission, HIPAA regulations, and medical device security considerations.
Experience with ServiceNow Security Operations and Security Incident Response modules or similar ITSM platforms.

Licenses, Registrations or Certifications

Required: None

Preferred: GIAC Certified Incident Handler (GCIH), Certified Incident Handler (ECIH), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), or CompTIA Security+ Certification.

Salary Range

$77,930 + depending on qualifications

Working Conditions

Standard office equipment
Repetitive use of a keyboard
May be exposed to such occupational hazards as communicable diseases, blood borne pathogens, ionizing and non-ionizing radiation, hazardous medications and disoriented or combative patients, or others.

Required Materials

Resume/CV
3 work references with their contact information; at least one reference should be from a supervisor
Letter of interest

Other Information

A criminal history background check will be required for finalist(s) under consideration for this position.

The retirement plan for this position is Teacher Retirement System of Texas (TRS), subject to the position being at least 20 hours per week and at least 135 days in length.

The University of Texas at Austin, as an equal opportunity/affirmative action employer, complies with all applicable federal and state laws regarding nondiscrimination and affirmative action. The University is committed to a policy of equal opportunity for all persons and does not discriminate on the basis of race, color, national origin, age, marital status, sex, sexual orientation, gender identity, gender expression, disability, religion, or veteran status in employment, educational programs and activities, and admissions.

Let me find your next job.

Thanks - you're signed up.

Cybersecurity Analyst II

Edtech.com's Summary

Cybersecurity Analyst II Full Description

Cybersecurity Specialist

Security Automation Engineer II, BU Info Security

Information Security Engineer III - 531108

Senior Information Security Analyst (Re-Announcement)

Senior Incident Response Analyst