Cybersecurity Analyst

Compensation Grade: S20

Salary Range: $94,665.00-$

Opening Date: July 24, 2026

Closing Date: August 8, 2026

Please Note: All job announcements close at 11:59 p.m. of the day before the posted closing date.

As a Cybersecurity Analyst, you will implement and maintain information technology security systems in support of the Airports Authority's Information Security Program. You will be responsible for protecting the Authority's data, networks, and systems by implementing security measures, managing the Security Information and Event Management (SIEM) system responding to security alerts, conducting audits, ensuring compliance, addressing security issues, maintaining cybersecurity processes, providing training, documenting procedures, advising management, and leading incident response efforts.

You will assist in reducing the attack surface by using appropriate technologies and processes to prevent, detect, and manage cyber threats; identify, monitor, assess, and counter cyber threats to our information systems and assist in implementing, and maintaining information technology security systems and procedures.

Serves in the Information Security Department of the Office of Technology located at the Headquarters Office Building.

Monitors, tests, and reports on the confidentiality, integrity, and availability of information assets in compliance with MWAA's information security policies and industry standards.

Ensures adherence to security and compliance standards, and participates in regular security audits and assessments.

Works closely with the Network Operations and Service Desk teams to address and resolve information security issues.

Provides expertise and support to various IT teams on deploying and configuring security appliances and systems.

Manages and monitors SIEM, Endpoint Detection and Response (EDR/XDR), and other enterprise security monitoring platforms to detect, analyze, and respond to cybersecurity events. Conducts vulnerability assessments and security scans; analyzes findings; and coordinates remediation activities with system owners and technical teams.

Analyzes and responds to security alerts, escalating high-risk events to the appropriate technology team for resolution.

Performs technical security reviews and cybersecurity risk assessments for systems, applications, and technology implementations.

Identifies, logs, blocks, and reports malicious activities within the Airports Authority networks and systems.

Implements and maintains cybersecurity processes and procedures to ensure threats are effectively managed and mitigated.

Monitors external third-party threat intelligence feeds and updates cybersecurity tools accordingly.

Informs and advises appropriate operations teams of threats to software, hardware, and operating systems.

Documents cybersecurity processes and procedures, ensuring clarity and consistency.

Conducts training sessions and creates user documentation to enhance awareness and adoption of cybersecurity best practices.

Works collaboratively with cyber and technical teams and business functions to promote a culture of security awareness.

Appropriately informs and advises management on security incidents and prevention strategies.

Monitors, tests, and reports user computing activities, such as failed logins and account lockouts, and reviews internal network and remote user access to ensure access management processes are working as designed.

Participates in penetration testing and Red Team, Blue Team, and Purple Team exercises and assists with validating remediation of identified findings. Participates as a core member of the incident response team, leading efforts to mitigate and resolve security incidents. Keeps abreast of security industry developments and best practices to identify and address emerging threats to protect organizational assets proactively.

Leads initiatives to improve the Airports Authority's cybersecurity posture, proposing innovative solutions to enhance overall security capabilities.

Supports business continuity and disaster recovery planning, testing, and recovery activities related to cybersecurity.

Performs other duties as assigned.