> Markdown version of [/jobs/ext/2880799-network-security-analyst](https://www.wearedevelopers.com/jobs/ext/2880799-network-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Network Security Analyst

- **Company:** Siritech Solutions Corp
- **Location:** Austin, TX, United States
- **Experience:** Experienced
- **Contract:** Temporary contract
- **Skills:** Microsoft Windows, Active Directory, ARM Architecture, Bash Shell, Cloud Computing, Cloud Computing Security, Apache Lucene, CompTIA Security+, Cyber Security, Computer Networks, Query Languages, Linux, Embedded SQL, Identity and Access Management, Intrusion Detection and Prevention, Intrusion Detection Systems, Python (Programming Language), Network Security, Network Protocols, Windows PowerShell, Azure Active Directory, ArcSight SIEM Tool, Cloud Services, Phishing, Kusto Query Language, Security Information and Event Management, Software Vulnerability Management, Scripting, Mitre Att&ck, QRadar, Malware, Cyber Threat Analysis, Firewalls (Computer Science), Azure Security Center, Information Technology, Cybercrime, IronPort, Microsoft Sentinel, Fireeye, Splunk, SentinelOne Expertise, Cisco, Qualys
- **Published:** September 13, 2026
- **Apply:** https://www.careerjet.com/jobad/us1970aa49075e2d7c7ede81b083db3989

## About the Role

Minimum 5+ years of overall experience in cybersecurity operations, security monitoring, incident response, threat detection, security investigations, or related cybersecurity disciplines.
Minimum 3+ years of security alert triage experience.
Minimum 3+ years analyzing cybersecurity events.
Minimum 3+ years documenting security incident investigations.
Minimum 3+ years working with cybersecurity frameworks.
Minimum 3+ years with incident-response processes.
Minimum 3+ years with threat-detection methodologies.
Minimum 3+ years in cybersecurity/SOC operations.
Minimum 3+ years of security-monitoring experience.
Minimum 3+ years of incident-response experience.
Minimum 3+ years of threat-detection experience.
Minimum 3+ years conducting security investigations.
Strong understanding of SIEM, EDR/XDR, IDS/IPS, firewalls, endpoint security, and cloud-security platforms.
Strong understanding of malware, phishing, insider threats, and APTs.
Knowledge of MITRE ATT&CK methodologies.
Knowledge of IOCs, IOAs, and threat intelligence.
Knowledge of the incident-response lifecycle, NIST Cybersecurity Framework, NIST Incident Response guidance, and PICERL.
Understanding of Windows, Linux, Active Directory, Microsoft Entra ID, and networking protocols.
Experience correlating data across multiple cybersecurity platforms.
Experience with query languages including KQL, SPL, Lucene, and ESQL.
Experience with scripting languages including PowerShell, Python, and Bash.
Preferred Skills:
SIEM platforms:
Microsoft Sentinel
Splunk, Must currently reside in the Austin metropolitan area.
Must be willing to work 100% onsite in Austin, TX.
Strong analytical and cybersecurity investigation capabilities.
Ability to distinguish genuine threats from false positives.
Strong risk-based decision-making skills.
Ability to follow incident-response and escalation procedures.
Ability to work independently and within a 24x7 cybersecurity team.
Strong written and verbal communication skills.
Ability to communicate with security engineers, incident responders, system administrators, leadership, and business stakeholders.
Must be available for occasional evening, weekend, and holiday support during critical security incidents.
Education:
Four-year degree in Cybersecurity, Information Security, Computer Science, Computer Information Systems, Management Information Systems, or related field Preferred.
Relevant education and professional experience may substitute where permitted.
Certifications:
CompTIA Security+ Preferred
GIAC Certified Incident Handler (GCIH) Preferred
GIAC Certified Intrusion Analyst (GCIA) Preferred
Certified SOC Analyst (CSA) Preferred
Microsoft Certified: Security Operations Analyst Associate (SC-200) Preferred
Other GIAC/SOC-related cybersecurity certifications Preferred
Preferred skills
SOC / CSOC Operations SIEM Security Alert Triage Incident Response Threat Detection Security Event Analysis EDR / XDR Cybersecurity Investigations, Job Description : 4-7 years of experience in the field or in a related area. Familiar with standard concepts, practices, and procedures within a particular field. Relies on limit…

## Description

The Network Security Analyst will perform advanced cybersecurity monitoring, threat analysis, security-event triage, and incident investigation within a Cybersecurity Operations Center (CSOC). The analyst will continuously monitor security alerts, investigate suspicious activities, identify potential threats, distinguish legitimate incidents from false positives, and coordinate incident-response activities.
The position requires strong SOC operations expertise across SIEM, EDR/XDR, network security, cloud security, identity protection, email security, vulnerability management, and threat-intelligence technologies., Continuously monitor, triage, analyze, and prioritize cybersecurity alerts.
Investigate suspicious network, endpoint, cloud, email, and user activity.
Determine incident severity, scope, impact, and risk.
Validate potential security incidents and distinguish threats from false positives.
Escalate confirmed threats to Incident Response, Threat Hunting, or SOC Engineering teams.
Correlate security events across:
Endpoints
Firewalls
IDS/IPS
Cloud Services
Authentication Systems
Threat Intelligence Feeds
Analyze Indicators of Compromise (IOCs) and Indicators of Attack (IOAs).
Investigate phishing emails, malware detections, suspicious network traffic, and anomalous user behavior.
Document investigations, findings, and response activities in case-management systems.
Assist with containment, eradication, and recovery activities.
Escalate critical findings to SOC/CSOC leadership.
Additional Responsibilities:
Tune security alerts and improve threat-detection capabilities.
Identify and reduce false-positive trends.
Integrate threat intelligence into SOC monitoring and investigations.
Review vulnerability-assessment results and remediation priorities.
Maintain incident-response procedures, playbooks, workflows, and knowledge-base documentation.
Research emerging cyber threats, attack techniques, and TTPs.
Support 24x7 cybersecurity operations when required.
Participate in high-priority incident response outside normal business hours.
Communicate security findings to technical and non-technical stakeholders., QRadar
ArcSight
LogRhythm
EDR/XDR:
Microsoft 365 Defender XDR
Microsoft Defender for Endpoint
CrowdStrike
SentinelOne
IDS/IPS:
Trellix / FireEye
Corelight
Threat Intelligence:
VirusTotal
Google Threat Intelligence
Cisco Talos
Recorded Future
MISP
Vulnerability Management:
Tenable
Qualys
Rapid7
Email Security:
IronPort ESA
Abnormal.ai
Proofpoint
Cloud Security:
Wiz
Microsoft Defender for Cloud Apps (MDCA)
Cortex Cloud
Sysdig
SASE:
Zscaler
Prisma
Netskope
Experience operating within a 24x7 SOC/CSOC environment., 14905 - Network Security Analyst (Onsite) - Austin, TX Start Date: ASAP Type: Temporary Project. Estimated Duration: 12 months with possible extensions Work Setting: 100% of t…

 + 8 hours ago


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)