Cybersecurity Analyst II

Date:
Sep 1, 2026

Location:

AUSTIN, TX

Join the Texas Health and Human Services Commission (HHSC) and be part of a team committed to creating a positive impact in the lives of fellow Texans. At HHSC, your contributions matter, and we support you at each stage of your life and work journey. Our comprehensive benefits package includes 100% paid employee health insurance for full-time eligible employees, a defined benefit pension plan, generous time off benefits, numerous opportunities for career advancement and more.

Explore more details on the Benefits of Working at HHS webpage.

Functional

Title:

Cybersecurity Analyst II

Job Title: Cybersecurity Analyst II

Agency: Health & Human Services Comm

Department: IT Security Posture EI

Posting Number: 20848

Closing Date: 10/01/2026

Posting Audience: Internal and External

Occupational Category: Computer and Mathematical

Salary Range: $5,797.66 - $7,500.00

Pay Frequency: Monthly

Salary Group: TEXAS-B-25

Shift: Day

Additional Shift: Days (First)

Telework

Travel:

Regular/Temporary: Regular

Full Time/Part Time: Full time

FLSA Exempt/Non-Exempt: Exempt

Facility

Location:

Job Location City: AUSTIN

Job Location Address: 701 W 51ST ST

Other Locations:

MOS Codes: ,,,,,,,,8858,14N,14NX,170A,170B,17A,17B,17C,17C0,17DX,17S,17SX,17X,181X,182X,183X,184X,1B4X1,1D7X1,1N4X1,255A,255N,255S,25B,25D,26A,26B,26Z,514A,5C0X1D,5C0X1N,5C0X1R,5C0X1S,5IX,681X,682X,683X,781X,782X,783X,784X,CTI,CTM,CTR,CWT,CYB
10,CYB
11,CYB
12,CYB
13,CYB
14,IS,ISM,ISS,IT,ITS

This position is open to U.S. Citizens and permanent residents.

This onsite role requires the selected candidate to work from an HHS office in Austin, Texas.

The Cybersecurity Analyst II performs advanced information security analysis with a focus on cloud security, web application protection, and governance, risk, and compliance activities. The position supports both on‑premises and cloud environments by evaluating, implementing, and monitoring security controls to prevent unauthorized access, modification, or disclosure of information resources.

The analyst conducts security assessments and risk-based needs assessments across assigned systems. Responsibilities include assisting with the development of System Security Plans (SSPs), documenting vulnerabilities and corrective actions, analyzing administrative, technical, and operational controls, and preparing audit documentation, formal reports, and leadership‑level reporting.

The role also provides advisory services to business partners, offering guidance on secure architecture, secure application development practices, and cloud configuration requirements. The analyst maintains compliance and risk artifacts in a Governance, Risk, and Compliance (GRC) platform, supports Authorization to Operate (ATO) activities, and delivers targeted security training to agency stakeholders. Work is performed under limited supervision with significant latitude for independent judgment.

Attends work on a regular and predictable schedule in accordance with agency leave policy and performs other duties as assigned.

• Security and Risk Management Services (30%)
• Provides security and risk management services by performing risk identification, assessment, and remediation, as well as regulatory and internal compliance monitoring; uses established standards and processes to adequately protect Health and Human Services (HHS) personnel, facilities, cloud infrastructure, information, and business operations.
• Performs cyclical and periodic technology risk assessments of cloud environments such as Microsoft Azure and Amazon Web Services (AWS) and on‑premises environments; reviews technology use within business initiatives; conducts web application security analysis, vulnerability analysis, and evaluates…