Network Security Analyst

Overview

JOB TITLE:

Network Security Analyst I

CAYUSE COMPANY:

Cayuse Civil Services, LLC

LOCATION

Austin, TX

SALARY

$66,560.00-$91,520.00

EMPLOYEE TYPE

Full-Time Salary Exempt

TRAVEL

No

RELOCATION

No

Employment in this role is conditional upon successful execution of the contract by the client.

The current period of performance is scheduled to end on August 31, 2027; however, the client retains the unilateral right to extend the contract beyond this date by exercising one or more option periods, subject to the terms, conditions, and funding provisions of the awarded contract

The Network Security Analyst Iperforms advanced cybersecurity analysis and threat triage activities within the Cybersecurity Operations Center (CSOC). This position involves continuous monitoring, evaluating, and prioritizing cybersecurity alerts, investigating suspicious activities, identifying potential threats, and coordinating incident response activities. This role protects [Agency Name]’s information systems, networks, and data by serving as the primary point of contact for security event analysis, threat identification, and incident escalation.

This position aligns with Cayuse’s core values of Innovation, Excellence, Collaboration, Adaptability, and Integrity by fostering technical solutions that meet customer needs, promoting teamwork, and prioritizing quality in deliverables.

• Cybersecurity Monitoring & Triage:
  Continuously monitor, analyze, and triage cybersecurity alerts from various platforms, including Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), cloud security tools, email security tools, identity protection systems, and network security platforms.
• Security Event Investigation:
  Conduct initial investigations to assess the severity, scope, and impact of cybersecurity alerts to determine potential risks to agency operations.
• Incident Escalation:
  Identify, validate, and prioritize security incidents based on established protocols. Escalate confirmed threats to appropriate teams such as Incident Response, Threat Hunting, and SOC Engineering.
• Threat Correlation:
  Correlate security events from multiple sources, such as firewalls, intrusion detection/prevention systems (IDS/IPS), cloud services, authentication systems, and external threat intelligence feeds.
• IOC/IOA Analysis:
  Review and analyze indicators of compromise (IOCs), suspicious network activities, malware, phishing emails, and anomalous user behaviors to identify potential security threats.
• Documentation:
  Document all investigative actions, findings, incidents, and response activities using ticketing and case management systems to maintain accurate tracking and reporting.
• Incident Containment and Coordination:
  Assist in incident containment, eradication, and recovery by consulting with technical teams and stakeholders to implement mitigations.
• Operational Improvement:
  Continuously improve threat detection by performing alert tuning, refining incident response processes, and integrating threat intelligence.
• Research & Development:
  Stay updated on cybersecurity technologies, new attack vectors, and evolving Tactics, Techniques, and Procedures (TTPs) to enhance cybersecurity operations.
• Vulnerability Assessment:
  Conduct vulnerability assessments and evaluate remediation efforts in relation to identified risks.
• Team Collaboration & Reporting:
  Collaborate with internal teams, communicate findings to CISO leadership, and report key activities to CSOC's leadership.
• Policy Adherence:
  Ensure compliance with internal policies, state, and federal cybersecurity regulations.
• Other duties as assigned.

• Minimum three (3) yearsof experience in the following areas:
  • Triaging security alerts.
  • Analy…