Cyber Security Analyst I

Department: Charlotte Area Transit System Department

Salary: $81,226.00 - $116,762.94 Commensurate with Experience

Thank you for your interest in joining the team that keeps Charlotte moving, at a very exciting time for our organization. At the Charlotte Area Transit System (CATS), we’re committed to delivering safe, reliable, and innovative transit services for our growing community, and we value employees who bring professionalism, passion, and a commitment to public service.

This position is currently employed by CATS, a department of the City of Charlotte. With the passage of the PAVE Act and last year’s sales tax referendum, CATS is preparing to transition from a City department to the newly created Metropolitan Public Transit Authority (MPTA). The MPTA was established to strengthen regional transit governance, improve accountability, and support long‑term investment in mobility. It’s an important and exciting step forward for transit in our region.

Employees hired into this role will remain City employees through December 31, 2026, and will transition to MPTA employment on January 1, 2027. Benefits and compensation will follow City provisions through 2026 and shift to MPTA provisions in 2027, with clear information shared in advance. Your core duties, reporting structure, and daily responsibilities will remain consistent, with no break in service. If anything delays the transition, your City employment, including compensation and benefits, will remain in place until the move to the MPTA occurs.

The creation of the MPTA positions us for a more modern, sustainable, and efficient transit system, one that can better support the Charlotte region for decades to come. We’re excited about what’s ahead and appreciate your interest in being part of it.

SUMMARY

The Cyber Security Analyst supports cybersecurity operations for the Charlotte Area Transit System (CATS) by monitoring systems, analyzing potential threats, and assisting with protection of enterprise and operational technology environments. This position helps maintain secure and reliable technology services supporting a 24/7 transit organization.
The role investigates security alerts, assists with incident response activities, and supports vulnerability management and compliance efforts. The Cyber Security Analyst collaborates with infrastructure, applications, and service desk teams to identify risks and strengthen organizational security practices.
Working under general direction, this position applies professional judgment while performing technical security analysis and operational support activities.

Major Duties and Responsibilities:

The following duties are standard for this position. The omission of specific statements of duties does not exclude them from the classification if the work is similar, related, or a logical assignment for this classification.

Security Monitoring and Analysis

• Monitor systems and security tools for suspicious activity.

• Review alerts generated by security monitoring platforms.

• Investigate anomalies and potential threats.

• Escalate incidents according to established procedures.

• Maintain awareness of evolving threat conditions.

Incident Response Support

• Assist with investigation of cybersecurity incidents.

• Collect and analyze system and event data.

• Support containment and remediation activities.

• Document investigative findings.

• Participate in post-incident reviews.

Vulnerability Management Support

• Assist with vulnerability scanning activities.

• Track remediation efforts across technology teams.

• Verify corrective actions.

• Support risk tracking and reporting.

Security Operations Support

• Assist with implementation of security controls.

• Support access reviews and account security practices.

• Help maintain monitoring and detection tools.

• Promote secure operational practices.

Compliance and Documentation

• Maintain security documentation and operational records.

• Support audits and compliance reviews.

• Document procedures and investigation activities.

• Contribute to security knowledge resources.

Collaboration and Awareness

• Coordinate with infrastructure and application teams.

• Provide input on potential security improvements.

• Support organizational cybersecurity awareness efforts.

• Communicate findings clearly to technical staff.

Core Competencies:

The position requires demonstrated competency in the following areas:

Security Analysis

Applies analytical thinking to identify and evaluate potential cybersecurity risks.

• Reviews data methodically.

• Recognizes suspicious patterns.

• Supports accurate investigations.

Attention to Detail

Maintains accuracy when reviewing technical information and documentation.

• Follows procedures carefully.

• Produces reliable analysis.

• Reduces oversight risk.

Operational Discipline

Supports consistent execution of security processes.

• Adheres to standards.

• Maintains documentation.

• Supports organizational readiness.

Collaboration

Works effectively within multidisciplinary technology teams.

• Shares information appropriately.

• Supports coordinated responses.

• Builds cooperative relationships.

Minimum Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field; or equivalent combination of education and experience.

• Two (2) years experience in information technology or cybersecurity-related work.

Preferred Qualifications:

• Experience with security monitoring or incident response activities.

• Familiarity with network or infrastructure environments.

• Entry-level cybersecurity certifications (Security+, or similar).

• Experience supporting public-sector or operational environments.

Knowledge, Skills and Abilities:

Knowledge of:

• Cybersecurity fundamentals and threat concepts.

• Security monitoring and alerting tools.

• Basic networking and system administration concepts.

• Incident response processes.

• Vulnerability management practices.

Skill in:

• Analyzing technical alerts and logs.

• Documenting investigative activities.

• Communicating technical findings clearly.

• Using security monitoring platforms.

Ability to:

• Apply analytical reasoning to technical problems.

• Follow structured procedures accurately.

• Learn evolving cybersecurity tools and threats.

• Work independently within defined operational frameworks.

• Maintain confidentiality and professional discretion.

Working Environment and Physical Demands:

• Work performed primarily in office environments.

• Participation in incident response outside normal business hours may occasionally be required.

• Requires prolonged computer use and analytical work.

• Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

CONDITIONS OF EMPLOYMENT

The City’s Background Check Policy requires background checks to be conducted on final internal or external candidate(s) applying for any position with the City of Charlotte. The type of information that will be collected as part of a background check includes, but is not limited to: reference checks, social security verification, education verification, criminal conviction record check, and, if applicable, a credit history check, sex offender registry and motor vehicle records check.

Background checks must be in compliance with all federal and state statutes, such as the Fair Credit Reporting Act (FCRA). The checks must be consistent with the guidelines set forth by these laws requiring organizations to obtain a candidate’s written authorization before obtaining a criminal background report, motor vehicle records check or credit report; and to properly store and dispose of information derived from such reports.

Final candidates must pass a pre-employment drug-screening test and physical examination. During the selection process, candidates may be asked to take a skills test, and/or participate in other assessments.

The City of Charlotte is an Equal Opportunity Employer and does not unlawfully discriminate on the basis of race, religion, color, sex, national origin, marital status, age, disability, sexual orientation, political affiliation or on the basis of actual or perceived gender as expressed through dress, appearance, or behavior.

Our culture is to serve the community honorably.

HOW TO APPLY

Apply online.

Federal law requires employers to provide reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job.

You are welcome to visit the City of Charlotte Human Resources Department lobby, where self-service application kiosks are available. They are located in our office at 700 East 4th Street, Suite 200, Charlotte, NC 28202. We are open Monday through Friday, from 9:30 a.m. to 3:30 p.m. (EST), excluding official City holidays.

For questions about your application or the hiring process, please email [email protected]

The City of Charlotte is committed to making our services and programs accessible to all. Upon request, auxiliary aids, written materials in alternate formats, language access, and other reasonable accommodations or modifications will be provided. To make a request, please fill out the Innovation & Technology ADA request form or call 704.336.4120.

BENEFITS

The City of Charlotte provides a comprehensive benefits package to eligible employees.

Click here to learn more about the City of Charlotte’s benefits.

The City of Charlotte is a drug and alcohol-free workplace.