Network Operations Center Analyst

Evo Tech, LLC is an Economically Disadvantaged Woman-Owned Small Business (EDWOSB) delivering program management, application development, cybersecurity, and IT solutions to federal government agencies and commercial clients. We are committed to advancing innovative technologies and fostering a culture of creativity. Guided by our vision to “Inspire the World, Create the Future,” we focus on building strategic partnerships and empowering great people.

The Network Operations Center Analyst will support Evo Tech’s Network operations by monitoring security events, performing incident analysis, and supporting Tier 1 and Tier 2 response activities. This role requires strong analytical skills, attention to detail, and the ability to follow established playbooks and escalation procedures to ensure timely and effective resolution of incidents. The Analyst will also support system administration tasks such as user access, account creation, log analysis, verification of security processes, and, working closely with end users, NOC/SOC teams and Field Service Representatives (FSRs).

This is a full-time, on-site position based in San Antonio, Texas, requiring flexibility to work non-traditional hours, including nights, weekends, holidays, and swing shifts.

• Monitor network events and analyze alerts to create incidents or dismiss false positives.
• Utilize ticketing system to track all incidents and actions to ensure proper metrics and remediation steps are recorded.
• Administer user system access and permissions; respond to password reset and account unlock requests.
• Troubleshoot straightforward system problems using appropriate tools, help desk instructions, SOPs, and problem solving skills.
• Monitor configuration and status of servers, operating systems, and applications.
• Assist with implementation of security patches and configuration changes (hardware and software).
• Monitor system security posture, respond to alarms, and support security incident response and reporting.
• Provide Tier 1 and Tier 2 support; coordinate with NOC and FSR teams to resolve and document incidents.
• Receive customer calls and emails, open and log trouble tickets, and lead Tier I & 2 troubleshooting using knowledge base resources.
• Assist customers that may not have much technical knowledge with issues related to applications, access or other technical issues.
• Open, update, and resolve incident tickets, update documentation, and elevate issues by defined policies and procedures.
• Support root cause analysis and corrective actions.

• Associate’s degree in computer science, Information Technology, Cybersecurity, or a related field (or equivalent experience).
• Relevant cybersecurity certifications (e.g., CompTIA Security+, CySA+, CEH, or equivalent).
• The ability to work for long periods of time at a desk in support of 24/7/365 operations.
• Experience in Tier 1/Tier 2 cybersecurity operations, incident response, or SOC/NOC support.
• Strong understanding of system administration, including user management, backups, and patching.
• Familiarity with malware analysis, forensic investigation, and incident response procedures.
• Knowledge of common cybersecurity frameworks and best practices.
• Excellent written and verbal communication skills.
• Strong problem-solving skills and ability to work in a fast-paced environment.
• Willingness and ability to work in a 24/7 NOC environment, including rotating nights, weekends, holidays, and swing shifts.

• Employment is contingent upon successfully obtaining and maintaining a DHS Security Clearance.

• Prior experience supporting federal government or Department of Defense contracts.
• Experience with security monitoring and log analysis tools (e.g., SIEM solutions).
• Familiarity with escalation procedures and ticketing systems.
• Experience with Active Directory administration.

The NOC Analyst role is based on-site in San Antonio, Texas. This position requires extended computer use, monitoring, and troubleshooting in a NOC environment. Occasional overtime may be required to address critical incidents. The role requires frequent…