> Markdown version of [/jobs/ext/3316571-network-security-analyst](https://www.wearedevelopers.com/jobs/ext/3316571-network-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Network Security Analyst - **Company:** ASSYST, Inc. - **Location:** Austin, TX, United States - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Bash Shell, Cloud Computing Security, Apache Lucene, CompTIA Security+, Cyber Security, Query Languages, Linux, Embedded SQL, Identity and Access Management, Intrusion Detection and Prevention, Intrusion Detection Systems, Python (Programming Language), Network Security, Microsoft Security Essentials, Network Protocols, Windows PowerShell, Azure Active Directory, ArcSight SIEM Tool, Cloud Services, Anti-Phishing, Kusto Query Language, Security Software, Security Information and Event Management, Software Vulnerability Management, Scripting, Cloud Platform System, In-Plane Switching (IPS), Mitre Att&ck, QRadar, Malware, Cyber Threat Analysis, Firewalls (Computer Science), Azure Security Center, Cybercrime, Microsoft Sentinel, Splunk, SentinelOne Expertise, Qualys, Vulnerability Analysis - **Published:** September 10, 2026 - **Apply:** https://www.austinjobsite.com/job.asp?id=3386247471&tx=JP5751FFL&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54 ## About the Role The ideal candidate will have experience in cybersecurity operations, security monitoring, incident response, threat detection, security investigations, or related cybersecurity disciplines, along with experience working with security monitoring and cybersecurity tools and frameworks., * Experience in cybersecurity operations, security monitoring, incident response, threat detection, security investigations, or related cybersecurity disciplines. * Experience triaging security alerts and analyzing security events. * Experience documenting incident investigations and response activities. * Experience with cybersecurity frameworks, incident response processes, and threat detection methodologies. * Experience working with SIEM, EDR/XDR, IDS/IPS, firewalls, endpoint security, cloud security, and threat intelligence platforms. * Experience with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, LogRhythm, or NetWitness. * Experience with Microsoft Security / Microsoft 365 Defender XDR. * Experience with EDR solutions such as Microsoft Defender for Endpoint, CrowdStrike, or SentinelOne. * Knowledge of MITRE ATT&CK, IOCs, IOAs, malware, phishing, and common cyber threats. * Experience with vulnerability management tools such as Tenable, Qualys, or Rapid7. * Knowledge of Windows, Linux, networking protocols, Active Directory, Microsoft Entra ID, and cloud environments. * Experience with query languages such as KQL, SPL, Lucene, or ESQL. * Experience with scripting languages such as PowerShell, Python, or Bash. * Knowledge of NIST Cybersecurity Framework, NIST Incident Response guidance, and PICERL. * Strong analytical, investigative, documentation, communication, and problem-solving skills. * Ability to distinguish legitimate threats from false positives and make risk-based decisions. * Ability to work independently and collaboratively within a 24x7 cybersecurity operations environment. Preferred Certifications: CompTIA Security+, GCIH, GCIA, Certified SOC Analyst (CSA), Microsoft SC-200, or other GIAC/SOC-related certifications. ## Description * Monitor, analyze, and triage cybersecurity alerts from security monitoring and detection platforms. * Investigate security events and suspicious activity to determine severity, scope, impact, and potential risk. * Identify, validate, and prioritize potential cybersecurity incidents and escalate confirmed threats as appropriate. * Correlate security events from multiple sources, including endpoints, firewalls, IDS/IPS, cloud services, authentication systems, and threat intelligence feeds. * Analyze indicators of compromise (IOCs), phishing activity, malware detections, suspicious network activity, and anomalous user behavior. * Document security investigations, findings, and response actions in ticketing and case management systems. * Support incident containment, eradication, and recovery activities. * Perform vulnerability assessment reviews and support risk-based remediation prioritization. * Assist with alert tuning, threat intelligence integration, detection improvements, and false-positive analysis. * Support the development and maintenance of security procedures, playbooks, workflows, and knowledge base documentation. * Research emerging cyber threats, attack techniques, tactics, and procedures (TTPs). * Participate in incident response, escalation, and after-action review activities. * Maintain accurate investigation documentation, metrics, and technical reports. * Provide support outside normal business hours during high-priority security incidents as required. ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [ The attacker's footprint](https://www.wearedevelopers.com/videos/375-the-attacker-s-footprint) - [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)