> Markdown version of [/jobs/ext/3393663-security-operations-analyst](https://www.wearedevelopers.com/jobs/ext/3393663-security-operations-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Operations Analyst

- **Company:** Resourcesoft, Inc.
- **Location:** Austin, TX, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Intrusion Detection and Prevention, Network Security, Network Forensics, Kusto Query Language, Security Information and Event Management, Microsoft Sentinel
- **Published:** September 14, 2026
- **Apply:** https://www.dice.com/job-detail/880ad38e-4f65-4866-a46b-0550cd883722

## About the Role

* 7 or more years of experience in cybersecurity, network security, security operations, or incident response.
 * Proficiency in Microsoft Sentinel, including incident management, analytics rules, workbooks, automation, and data connectors.
 * Experience with SIEM platform/architecture support, log collection and management, and detection engineering methodology.
 * Experience with NDR and EDR tools for network traffic analysis, endpoint alert triage, and advanced threat hunting.
 * Experience writing and interpreting KQL and SPL queries to support security investigations and reporting.
 * Excellent written and verbal communication skills, with strong analytical and cross-team collaboration abilities.

## Description

* Monitor security alerts, network events, endpoint telemetry, and threat intelligence feeds across on-premises, cloud, and endpoint environments.
 * Investigate suspicious activity and SIEM correlation events using Microsoft Sentinel and KQL/SPL queries to determine scope and impact.
 * Perform incident triage, containment coordination, and documentation in alignment with security operations procedures.
 * Develop and tune detection rules, dashboards, alerts, and playbooks to improve visibility across network, endpoint, and cloud environments.
 * Support threat hunting activities using packet/session analysis and endpoint telemetry investigative techniques.
 * Collaborate with network, infrastructure, and application teams to validate security events and implement risk mitigation measures.