Cybersecurity Analyst - Security Operations Center

About the role

The University of Texas MD Anderson Cancer Center is seeking a Cybersecurity Analyst to support its Cybersecurity department within the Security Operations Center (SOC). This role plays a vital frontline role in 24x7 SOC operations, ensuring continuous monitoring, rapid detection, and timely response to security incidents.

Responsibilities

• SOC Monitoring & Alert Triage
• Monitor network traffic and security alerts across SIEM, EDR, and firewall platforms
• Review and analyze high volumes of alerts to distinguish benign activity from threats
• Triage alerts using predefined playbooks and standard operating procedures
• Perform real-time analysis of security telemetry to identify anomalies
• Incident Response & Escalation
• Execute first-response containment actions such as disabling compromised accounts
• Isolate infected endpoints to prevent lateral movement
• Create detailed incident tickets with supporting evidence and timelines
• Escalate confirmed or high-risk incidents to Tier 2 and Tier 3 analysts
• Threat Hunting & Analysis
• Participate in threat hunting across endpoint, network, identity, and cloud environments
• Apply threat intelligence and hypotheses to detect emerging threats
• Analyze patterns and identify gaps in detection coverage
• Support development of improved detection strategies
• AI-Enabled SOC Operations
• Utilize approved AI tools, including generative and agentic capabilities, to enhance SOC processes
• Improve alert triage, investigations, and documentation using AI-enabled workflows
• Develop and deploy AI agents integrated with security tools via Model Context Protocol (MCP)
• Automate repetitive tasks to increase efficiency and response speed
• Metrics, Reporting & Documentation
• Contribute to SOC dashboards, metrics, and reporting on threat trends and activity
• Maintain and update runbooks, documentation, and SOPs for consistent operations
• Support continuous improvement initiatives in SOC processes
• Perform additional duties as assigned

Qualifications

• Required: Bachelor's Degree in Computer Information Systems, Business Information Systems, Computer Science or related field.
• Preferred: Master's Degree in Information Security, Computer Science or related field.
• Required: 2 years of experience in one or more information security domains, to include managing security technologies and/or programs and developing information security standards and procedures.
• May substitute required education degree with additional years of equivalent experience on a one to one basis.
• Preferred: At least 2-3 years of hands-on experience working in a Security Operations Center performing alert triage, investigation, and incident response, hands-on (querying, building/tuning detections, dashboards) in an enterprise SIEM, direct experience leading or serving as a primary responder on security incidents through the full lifecycle, relevant industry certification (e.g., GCIA, GCIH, GCFA, CySA+, Security+, or equivalent).
• Required: Ability to work on an on-call rotation and/or shift coverage as required by 24x7 SOC operations.
• Prefer candidates in Houston Texas or surrounding area.

Skills

• Hands-on SOC experience
• Relevant industry certifications such as GCIH, GCIA, GCFA, CySA+, or Security+
• Experience in SIEM platforms, incident response, and threat analysis in enterprise environments
• Experience with AI tools and generative/agent capabilities

Benefits

• Employer-paid medical coverage starting day one for employees working 30+ hours/week, plus optional group dental, vision, life, AD&D, and disability insurance.
• Accruals for PTO and Extended Illness Bank, plus paid holidays, wellness, childcare, and other leave options.
• Tuition Assistance Program after six months of service and access to extensive wellness, fitness, and employee resource groups.
• Defined-benefit pension through the Teachers Retirement System, voluntary retirement plans, and employer-paid life and reduced salary protection programs.

Pay

• Minimum $42.31 - Midpoint $52.88 - Maximum $63.46

Schedule

• 100% Remote within Texas