Cybersecurity Operations Engineer; Cybersecurity Analyst II

Job Description - Cybersecurity Operations Engineer (Cybersecurity Analyst II) )

Organization: TEXAS EDUCATION AGENCY

Primary

Location:

Texas-Austin

Work Locations:
Texas Education Agency, 1701 North Congress Avenue, Austin, 78701

Employee Status:
Regular

Travel:
Yes, 5% of the Time

State Job Code: 0320

Salary Admin Plan: B

Grade: 25

Salary (Pay Basis): $5,797.67 - $7,333.81 (Monthly)

Number of Openings: 1

Overtime Status:
Exempt

Closing Date:
Ongoing

The Texas Education Agency (TEA) will improve outcomes for all public‑school students in the state by providing leadership, guidance, and support to school systems.

• We are Determined:
  We are committed and intentional in the pursuit of our main purpose, to improve outcomes for students.
• We are People‑Centered:
  We strive to attract, develop, and retain the most committed talent, representing the diversity of Texas, each contributing to our common vision for students.
• We are Learners:
  We seek evidence, reflect on success and failure, and try new approaches in the pursuit of excellence for our students.
• We are Servant Leaders:
  Above all else, we are public servants working to improve opportunities for students and provide support to those who serve them.

The Office of Information Technology works closely with all agency divisions to implement innovative technology solutions in a cost‑efficient manner that supports the goals and priorities of the Texas Education Agency. The Office of IT provides efficient technology solutions and stellar customer services to internal staff, 20 Educational Service Centers, and 1,200+ public‑school districts and charter schools. Services include leadership on IT initiatives;

guidance on security/policy issues; new application development/enhancements; software acquisition; technical support; assistance with technical sections of purchasing documents such as RFI, RFO, RFP; and oversight on the data collection process which helps to support and improve outcomes for all of Texas’ 5 million+ students.

This position is funded through December 30, 2026. Continuation beyond that date is contingent on available funding.

The Cybersecurity Operations Engineer assists the Texas Education Agency (TEA) mission to support every Texas public school student to be ready for college, career or the military and understands the Agency must first have a workforce of high‑performing individuals who are committed to improving outcomes for Texas students. With this as our guiding principle, the Cybersecurity Operations Engineer works closely with TEA’s Cybersecurity Operations Team Lead to implement a stakeholder‑focused Information Security Program to protect the information shared with the Agency by the citizens of Texas and Local Education Agencies.

Flexible work location within the state of Texas may be considered for qualified candidates.

Please note that a resume is a required attachment for applying to this position. Incomplete applications will not be considered. Applicants who are strongly being considered for employment must submit to a national criminal background check.

Job duties are not limited to the essential functions mentioned below. You may perform other functions as assigned.

1. Cybersecurity Engineering: Implement, maintain, tune, and manage various cybersecurity tools with a primary focus on SOAR/SIEM tools, including log collection, normalization, log forwarder management, alert and detection rule creation, RBAC configuration, dashboards, visuals, reports, and documentation. Manage and monitor the EDR platform.

2. Cybersecurity Analysis: Provide cybersecurity consultation for TEA projects aligning with the Information Security Program; guide on security requirements and controls; analyze SIEM/SOAR/EDR data to inform monitoring and detection improvements; document findings in written reports when required.

3. Incident Response: Resolve security issues in diverse and decentralized environments; communicate effectively; detect, investigate, remediate, and recover from cybersecurity threats; report residual risk, vulnerabilities, and exposures to the Incident Response Lead;…