TXCC - SOC Cybersecurity Engineer (Cybersecurity A

Please paste the following URL into a browser to view the entire job posting on the CAPPS Careers page.https://erphcmprd.cpa.texas.gov/psp/candidateportal/EMPLOYEE/HRMS/c/HRS\_HRAM\_FL.HRS\_CG\_SEARCH\_FL.GBL?Page=HRS\_APP\_JBPST\_FLandAction=UandFOCUS=ApplicantandSiteId=1andJobOpeningId=107243andPostingSeq=1Agency InformationThe Texas Cyber Command (TXCC) is the state's front line of cyber defense, established by the 89th Texas Legislature to protect Texans, critical infrastructure, and government systems from evolving cyber threats. Headquartered in San Antonio (a national hub of cybersecurity talent), TXCC unites threat detection, incident response, and statewide cyber readiness under one mission-driven agency to establish Texas as the most cyber-resilient state in the nation. At TXCC, your work doesn't just sit in a queue - it actively secures, protects, defends, and educates over 31 million Texans every day.Job DescriptionPerforms complex to highly advanced cybersecurity analysis and engineering work within the Texas Cyber Command (TXCC) Unified Cyber Task Force's (UCTF) Security Operations Center (SOC). Designs, configures, integrates, automates, secures, and maintains cybersecurity platforms and services supporting threat detection, investigation, and incident response for state agencies and other participating entities. Performs engineering activities involving security monitoring, telemetry management, detection capabilities, automation, system integrations, and operational reliability. Collaborates with cybersecurity operations, incident response, digital forensics, threat intelligence, and other internal and external partners to maintain and improve cybersecurity capabilities.Works under the direction of the SOC Director, with varying degrees of supervision and latitude for initiative and independent judgment based on classification level. Assignments may emphasize platform and telemetry engineering, detection and automation, or exposure and service assurance, with responsibilities varying according to operational needs and technical specialization. Performs work within established authority, applicable laws, approved agreements, and organizational policies and procedures.Essential Job DutiesConfigures, administers, secures, maintains, and improves cybersecurity platforms and supporting infrastructure, including security monitoring, endpoint protection, network security, cloud security, threat intelligence, automation, and case-management technologies. Identifies and resolves technical issues to maintain reliable security operations.Designs, implements, and maintains security telemetry collection, integration, processing, and enrichment capabilities. Onboards and validates data sources, monitors data quality and availability, and troubleshoots collection failures, data loss, and integration issues to support effective detection and investigation.Develops, tests, implements, and maintains scripts, application programming interface (API) integrations, and automated workflows supporting cybersecurity operations. Automates data enrichment, investigative processes, reporting, information exchange, and authorized response activities while maintaining appropriate security and operational controls.Develops, implements, tests, and improves security detection rules, investigative queries, correlation logic, and automated response capabilities. Incorporates threat intelligence, incident findings, and operational requirements to improve threat identification, detection accuracy, and response effectiveness.Monitors, evaluates, and improves the availability, performance, reliability, and resilience of cybersecurity platforms and services. Investigates system failures, identifies root causes, coordinates technical support, implements corrective actions, and maintains procedures supporting service restoration and operational continuity.Implements and maintains security configurations, access controls, authentication mechanisms, audit logg ng, and other protective measures for assigned cybersecurity platforms and services. Identifies and remediates vulnerabilities, misconfigurations, and security weaknesses in accordance with established requirements.Develops, tests, documents, and implements changes to cybersecurity platforms, configurations, code, detections, and integrations. Uses established change-management, version-control, testing, and deployment procedures to minimize operational disruption, validate results, and maintain system integrity.Integrates and analyzes asset, vulnerability, and exposure information to support cybersecurity monitoring, risk prioritization, remediation tracking, and operational reporting. Develops and improves processes, dashboards, and automated quality checks to evaluate security coverage and control effectiveness.Provides technical engineering and investigative support during cybersecurity incidents, including assistance with telemetry, queries, detection capabilities, automation, and platform troubleshooting. Collaborates with incident responders and other operational teams to analyze activity, identify technical limitations, and support authorized response activities.Evaluates cybersecurity technologies, system architectures, and operational requirements to recommend improvements in performance, capacity, security, resilience, maintainability, and cost-effectiveness. Maintains technical documentation, system diagrams, integration records, operational procedures, and other materials supporting cybersecurity services and assessments.Collaborates with internal teams, participating entities, vendors, and other partners to coordinate technical activities, resolve operational issues, and improve cybersecurity capabilities. Participates in training, exercises, assigned on-call support, and operational-readiness activities; provides technical guidance and knowledge sharing; and performs other work-related duties as assigned.QualificationsMust meet applicable U.S