Cyber Security Analyst

Overview The selected contractor will support key cybersecurity initiatives including SIEM operations, automation, incident response processes, and integration of security tools. This role is critical to advancing our security operations and maturity. Role and Responsibilities • Contribute to the development of cybersecurity strategies, objectives, and project plans • Assist with design and implementation of improved cybersecurity processes and services • Administer and maintain cybersecurity technology platforms for the Elections Administrative Department and the Harris County enclave • Fulfill customer requests and support daily security operations, including incident monitoring, analysis, and response • Analyze cybersecurity threats and vulnerabilities and develop appropriate mitigation strategies • Create documentation including procedures, job aids, reports, metrics, and presentations • Participate in Cybersecurity Incident Response Team (CIRT) investigations and activities. Dutiesand Skills • Cyber Incident Response • KQL – Deep understanding and hands-on experience • SOC Analyst / Operations – Level 1, 2, and 3 (Triage, Escalation) • SIEM Administration – Managing, maintaining, creating custom detections/logging • SentinelOne – In-depth knowledge for incident handling, hunting, queries, and detections • Linux Administration – Comfortable with navigation, configuration, and server management • Microsoft Cloud Security Tools – Understanding of architecture and platform use Requirements • 2+ years of SIEM experience, preferably with Azure Sentinel and Kusto Query Language (KQL) • Multi-year, direct experience in Incident Response, ideally in an Incident Response Team or MSSP setting for medium to large organizations • Practical experience with tools within the Microsoft security stack Job Type: Full-time Pay: $46.00 per hour Benefits: • Health insurance Schedule: • Monday to Friday Experience: • SIEM: 2 years (Required) • Azure Sentinel: 2 years (Required) • Kusto Query Language: 2 years (Required) • Microsoft Security Stack: 2 years (Required) • Incident Response Team: 2 years (Required) • Information security: 5 years (Required) License/Certification: • CompTIA Security+ (Required) Ability to Commute: • Houston, TX 77002 (Required) Work Location: Hybrid remote in Houston, TX 77002