Working Title: Network Security Analyst
Agency: Texas Health and Human Services Commission
Location: 701 51st St., Austin, Texas 78751
Telework Policy: 100% onsite, no remote work
Out of State Policy: Candidates must be within the Austin, Texas area. Out of State candidates will not be considered.
Solicitation Reference Number: 529400796
 

Minimum Requirements: Candidates that do not meet or exceed the minimum stated requirements (skills/experience) will be displayed to customers but may not be chosen for this opportunity.
Years	Required/Preferred	Experience
3	Required	Evaluate and review existing SIEM platform capabilities to determine current system state. Aspects include benchmarking of in use hardware, storage and virtualization features, evaluating overall system performance, investigating log and packet ingestion
3	Required	Design, prepare, and present supporting documentation such as status reports, upgrade/optimization suggestions, project plans, briefings, and presentations, to present to audiences such as CSOC Engineering Team Members.
3	Required	Use experience, research, documentation, meetings, and collaboration to understand the HHSC CSOC’s SIEM operations, strategic objectives, processes, issues, challenges, and opportunities for improvement.
3	Required	Interact extensively with HHSC internal organizational stakeholders, including CSOC Team, CSOC Team Leads and CSOC Management, Internal and Perimeter network teams, Application and Database administrators and developers.
3	Required	Fulfill basic CSOC SIEM project management duties to ensure the successful completion of CSOC short-term engagements with vendors and support organizations, to include creation of project plans and change tickets, communications management with team.
3	Required	Perform review and editing on existing HHSC CSOC SIEM documentation to include checks for relevance, completeness format, clarity, and overall cohesiveness. Manage updates as architecture(s) evolve and change and make revisions to technical literature.
5	Preferred	Experience with RSA Netwitness SIEM Platform to include evaluation and selection of supporting hardware, installation, configuration and maintenance of SIEM system components such as servers and/or virtual machines and SIEM configuration and maintenance.
5	Preferred	Perform steady state operation, tuning, optimization and support for RSA Netwitness SIEM platforms, using tools to include the Health and Wellness features and service status features within Netwitness.
5	Preferred	Use research, team meetings, collaboration with other functional groups, understanding of the HHSC organization’s strategic objectives and candidate’s past experience with RSA Netwitness to determine a long term roadmap for the HHSC CSOC SIEM.
5	Preferred	Perform frequent meetings with relevant software and other technical vendors such as RSA Netwitness and Dell to include feedback on current RSA Netwitness SIEM usage, performance and utilization, incorporating vendor roadmaps into the overall SIEM strat.
5	Preferred	Troubleshoot, research and resolve systemic issues in the RSA Newitness SIEM system and supporting software and hardware, providing short, medium and long term solutions to improve and maintain desired performance levels.
5	Preferred	Assist in data parsing and normalization in RSA Netwitness SIEM platform on data streams both existing and new, leveraging advanced knowledge of regular expressions and other programmatical tools such as scripting languages like Python and/or Perl.
5	Preferred	Netwitness XDR Specialist – Administration certification

All work products resulting from the project shall be considered "works made for hire" and are the property of the Texas Health and Human Services Commission and may include pre-selection requirements that potential Vendors (and their Candidates) submit to and satisfy criminal background checks as authorized by Texas law. Texas Health and Human Services Commission will pay no fees for interviews or discussions, which occur during the process of selecting a Candidate(s).
Administer and Operate a RSA Netwitness Platform, a SIEM cyber security tool.
** If applicable, please verify and note clearly in the response that the candidate possess the Netwitness XDR Specialist Administrator Certification.
** The interview and job is onsite.
Services are expected to start 02/01/2024 and are expected to complete by 08/31/2024. Total estimated hours per Candidate shall not exceed 2080 hours. This service may be amended, renewed, and/or extended providing both parties agree to do so in writing.
Services shall be provided during normal business hours unless otherwise coordinated through the Texas Health and Human Services Commission. Normal business hours are Monday through Friday from 8:00 AM to 5:00 PM, excluding State holidays when the agency is closed.
The primary work location(s) will be at 701 51st St., Austin, Texas 78751. Any and all travel, per diem, parking, and/or living expenses shall be at the Candidate's and/or Vendor's expense. Texas Health and Human Services Commission will provide pre-approved, written authorization for travel for any services to be performed away from the primary work location(s). Pre-approved travel expenses are limited to the rates and comply with the rules prescribed by the State of Texas for travel by its classified employees, including any requirement for original receipts.
The Candidate(s) may be required to work outside the normal business hours on weekends, evenings and holidays, as requested. Payment for work over 40 hours will be at the hourly rate quoted and must be coordinated and pre-approved through Texas Health and Human Services Commission.
Services are expected to start on or around February 1, 2024 and are expected to completed by August 31, 2024. Total estimated hours per Candidate shall not exceed 2,080 hours for FY24. This service may be amended, renewed, and/or extended providing both parties agree to do so in writing.
A) Services shall be provided during normal business hours unless otherwise coordinated through the Agency. Normal business hours are Monday through Friday from 8:00 a.m. through 5:00 p.m., excluding Texas state holidays when the agency is closed. 
B) The primary work location will be 701 51st St., Austin, Texas 78751.
Position is 100% ONSITE at the location listed above (NO REMOTE WORK). Program will only accept LOCAL ONLY candidates for this position.