Network Security Analyst – Level 1 Job Austin area,Texas USA,IT/Tech

Perform advanced cybersecurity analysis and threat triage within the Cybersecurity Operations Center (CSOC)
Continuously monitor, analyze, and triage alerts from SIEM, EDR, cloud security, email security, identity protection, and network security platforms
Investigate cybersecurity alerts to assess severity, scope, impact, and operational risk
Identify, validate, prioritize, and escrow confirmed incidents to Incident Response, Threat Hunting, and SOC Engineering teams
Correlate events from firewalls, IDS/IPS, cloud services, authentication systems, and threat intelligence feeds
Analyze IOCs, IOAs, suspicious network activity, malware, phishing emails, and anomalous user behavior
Document investigations, findings, incidents, and response activities in ticketing and case management systems
Assist with incident containment, eradication, and recovery by coordinating mitigations with technical teams and stakeholders
Improve threat detection through alert tuning, incident response process refinement, and threat intelligence integration
Research cybersecurity technologies, attack vectors, and evolving TTPs
Conduct vulnerability assessments and evaluate remediation efforts
Collaborate with internal teams, communicate findings to CISO leadership, and report activities to CSOC leadership
Ensure compliance with internal policies and state and federal cybersecurity regulations
Perform other duties as assigned

Requirements

Minimum three (3) years of experience triaging security alerts, analyzing cybersecurity events, documenting findings and incident response actions, utilizing cybersecurity frameworks, managing incident response and threat detection activities, and conducting security investigations
Strong technical expertise with SIEM platforms such as Net Witness, Microsoft Sentinel, Splunk, QRadar, Arc Sight, or Log Rhythm
Experience with Microsoft 365 Defender XDR and Microsoft Sentinel
Experience with EDR tools such as Microsoft Defender for Endpoint, Crowd Strike, or Sentinel One
Experience with IDS/IPS technologies such as Trellix/Fire Eye or Corelight
Experience with threat intelligence platforms such as Virus Total, Google Threat Intelligence, Cisco Talos, Recorded Future, or MISP
Experience with vulnerability management tools such as Tenable, Qualys, or Rapid7
Experience with email security tools such as Iron Port ESA, Abnormal.ai, or Proofpoint
Experience with cloud security monitoring tools such as Google Wiz, MDCA, Cortex Cloud, or Sysdig
Experience with SASE tools such as Zscaler, Prisma, or Netskope
Knowledge of CSOC/SOC processes and best practices
Knowledge of incident response lifecycle and cybersecurity frameworks, including NIST Cybersecurity Framework and NIST Incident Response Guidance (PICERL)
Knowledge of SIEM, EDR/XDR, IDS/IPS, firewalls, common cyber threats, threat intelligence, Windows/Linux, networking protocols, and enterprise security controls
Skilled in analyzing and triaging cybersecurity incidents and threats
Skilled in investigating suspicious activities, including IOCs, IOAs, suspicious emails, and network anomalies
Skilled in query languages such as KQL, Lucene, SPL, or ESQL
Skilled in scripting and automation using Power Shell, Python, or Bash
Ability to produce high-quality reports and investigation summaries
Exceptional interpersonal, verbal, and written communication skills
Excellent organizational, analytical, problem-solving, multitasking, and attention-to-detail skills
Ability to work independently and on a multifunctional team
Ability to handle sensitive and confidential information appropriately
Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Management Information Systems, or a related field is preferred; equivalent experience may substitute
Relevant…