The open roles include Cybersecurity Analyst II and III positions, with some focused on general operational readiness and others dedicated to threat research or security operations center (SOC) monitoring. Each position will be housed within the Cybersecurity Operations division and supports TXCC’s mission of identifying, analyzing and responding to cyber threats across Texas.
All positions are based in San Antonio.
The Cybersecurity Analyst III (SOC Analyst) position will play a key role in DIR’s enterprise cybersecurity operations. Responsibilities include detecting and responding to incidents, conducting forensic investigations, managing tools such as endpoint detection platforms and performing vulnerability analysis. The role may also involve on-call response duties and supports more than 50,000 state users. It pays between $9,041-$9,458 per month.
The Cybersecurity Analyst II positions have more targeted focuses:
- One posting emphasizes incident response, risk assessments and monitoring, including managing alerts, triaging vulnerabilities and contributing to agency security planning. The position pays between $7,833-$8,025 per month.
- Another Cybersecurity Analyst II role supports threat research and advanced analytics, including developing detection content, analyzing malware and coordinating with Texas public-sector entities. This position pays the same monthly range.
All positions require several years of cybersecurity experience, and many prefer candidates with certifications such as CISSP, CEH or GIAC. Bachelor’s degrees in cybersecurity, information systems or a related field are preferred but may be substituted with additional relevant experience.
The Texas Cyber Command, backed by $345 million in state funding and established through House Bill 150, is centralizing the state’s cybersecurity infrastructure. Led by Cyber Chief T.J. White, TXCC is building out three core units: a Cyber Threat Intelligence Center, a Digital Forensic Lab and Incident Response. These analyst roles are part of that growing structure as the agency prepares to absorb cybersecurity operations from DIR by the end of 2026.
Editor's note: This story was drafted by generative AI and edited by humans for accuracy, bias and clarity. Have feedback? Send it to Ben Miller.
