Cybersecurity Analyst

Join the City of Sugar Land as a non-exempt, full-time Cybersecurity Analyst in Sugar Land, TX (onsite). In this role, you will help protect and strengthen the organization’s technology infrastructure through security operations, monitoring, hardening, and continuity planning.

Responsibilities

• Implement, configure, and manage Cisco XDR, Cisco Endpoint Security, and Fortinet Gateways to support proactive threat detection and response.
• Monitor network and endpoint activity for security incidents using SIEM and XDR tools.
• Investigate, analyze, and respond to security breaches, threats, and vulnerabilities.
• Administer and maintain Cisco Firepower and Cisco ASA firewalls to support secure and efficient traffic management.
• Administer Duo Multi-Factor Authentication (MFA) to improve secure access and identity protection.
• Perform network hardening to reduce attack surface in alignment with best practices and compliance standards.
• Conduct server hardening across Windows and Linux systems to meet internal and regulatory requirements.
• Review and implement secure configurations, patch management, and vulnerability remediation.
• Participate in DR drills and testing to validate readiness and response effectiveness.
• Maintain up-to-date documentation covering network security configurations, standards, and incident response procedures.
• Support compliance initiatives through audits and reporting (including NIST, ISO 27001, or CIS Controls).
• Work as an essential employee before, during, and after an emergency or disaster.
• Stay current on and comply with all City and departmental policies and procedures.
• Perform other duties and responsibilities as assigned by a direct supervisor or Director.

Requirements

• Formal education: Bachelor’s Degree in Computer Science, Engineering, or another relevant STEM field (or equivalent technical training) backed by industry-recognized credentials and certifications.
• Experience: Three years of information technology experience emphasizing infrastructure and operations.
• Enterprise security exposure (required): 3–5 years of hands-on experience managing and securing enterprise networks and systems.
• Required technology experience: Cisco security and firewall applications and appliances, XDR/MDR, SIEM, NAC, IPS/IDS, IAM, and MFA; plus proven experience with:
  • Cisco XDR, Cisco Firepower, Cisco ASA, and Cisco Endpoint
  • Fortinet Gateways
  • Duo MFA
  • Server and Network Hardening
  • Disaster Recovery implementation and testing
• Strong understanding of TCP/IP, VPNs, IDS/IPS, and secure network design principles.
• Familiarity with incident response, threat intelligence, and vulnerability management processes.
• Licensing/eligibility: Valid Texas Class “C” Driver License.
• Clearance: Must be eligible to obtain and maintain CJIS clearance.
• Certifications: Cisco certifications such as CCNA, CCNP (Enterprise, Security, or equivalent).

Benefits

• Medical, dental, and vision coverage starting Day 1
• TMRS pension with 2:1 city match and 457(b) options
• Paid holidays, vacation, and paid parental leave
• Wellness programs, mental health resources, and an EAP
• Career development programs and growth opportunities
• Employee contribution: 7%
• City matches 2:1 with 5-year vesting
• 10 Holidays per calendar year, including one floating Holiday
• Vacation:
  • Other than Public Safety: 0–2nd Year 10 days/year; 3–10 Years 15 days/year; 11+ Years 20 days/year
  • Public Safety: First Year 10 days/year; 2–10 Years 15 days/year; 11+ Years 20 days/year
• Sick leave:
  • Other than Firefighters: 8 hours/month (max 1,040 hours)
  • Shift Firefighters: 12 hours/month (max 1,456 hours)
• Sick Leave Incentive Program: annual conversion of sick leave to vacation
• Longevity pay: $4.00/month for the first 25 years of continuous employment (max $1,200 annually)
• 125 cafeteria plan
• The City contributes to employee and dependent coverage in the HMO, HDHP, and dental plans offered
• Vision care plan (voluntary for employees and eligible dependents)
• AFLAC plans (voluntary payroll deduction for Accident, Cancer, Critical Illness, and Hospital policies)
• Basic Life and AD&D: one-time annual salary coverage with a minimum of $50,000
• Long Term Disability: 60% of salary (depending on position category) up to $7,500/month, with benefits beginning after 90 days of disability
• Supplemental Life and AD&D: employees can elect supplemental coverage up to $750,000 for themselves and $250,000 for spouse, plus $15,000 for child(ren)
• Short Term Disability (optional): 70% of weekly salary up to $1,500/week (tax free)
• Pre-Paid Legal Plan (voluntary): base cost of $7.87 per pay period
• Deferred compensation (optional): minimum and maximum contributions set by plan administrator and IRS; city contracts with Dearborn & Creggs and ICMA-RC
• EAP administered by Alliance Work Partners (AWP) (registration code: AWP-COSL-3822; 1-800-343-3822)