Tier 1 Cyber Security Analyst
Listed on 2026-10-11
-
IT/Tech
Cybersecurity, Security Management & Operations, Network Security, IT Support
Tier 1 Cyber Security Analyst (SOC)
24/7 SOC environment including nights, weekends, and holidays
On-call or extended hours during incidents
MUST go onsite in Downtown Houston
hourly rate is based on experience
Position Summary
The Tier 1 Cyber Security Analyst is responsible for the initial monitoring, detection, triage, and escalation of security events within a 24/7 Security Operations Center (SOC). This role serves as the frontline of cyber defense, leveraging SIEM and SOAR platforms to identify potential threats, investigate alerts, and ensure timely escalation according to established incident response procedures. This position requires a highly motivated, curious, and analytically driven individual who can think critically, adapt quickly, and operate effectively in a fast-paced environment.
Key Responsibilities
Monitoring & Alert Triage:- Monitor security events and alerts from SIEM platforms (e.g., Splunk) and other security tools.
- Perform initial triage and investigation of alerts to determine severity, scope, and potential impact.
- Analyze logs, network activity, endpoint data, and email security alerts (e.g., Proofpoint).
- Enrich alerts with contextual data (threat intelligence, asset data, user behavior).
- Follow defined escalation paths to Tier 2/3 analysts based on severity, confidence, and impact.
- Document incidents, findings, and actions taken in case management systems.
- Execute basic response actions using SOAR platforms (e.g., Splunk SOAR).
- Assist in containment actions under guidance.
- Support 24/7 SOC operations, including shift work.
- Participate in shift handoffs.
- Maintain situational awareness of threats.
- Use Splunk SOAR for automation.
- Investigate email threats using Proofpoint.
- Work with Microsoft and Azure security tools.
- Improve alert fidelity and reduce false positives.
- Stay current on emerging threats.
- Minimum 2 years of experience in 24/7 SOC environment preferred
- Associate degree in Cybersecurity, IT, or related field OR equivalent SOC experience.
- CompTIA Security+ Certification Required
- Experience with Splunk, Splunk SOAR, Proofpoint
- Experience triaging alerts and escalation processes
- Knowledge of networking fundamentals and log analysis
- Familiarity with Microsoft and Azure platforms
- CompTIA CySA+ (preferred)
- Splunk Core Certified User
- Microsoft Security certifications (e.g., SC-200, AZ-500)
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).