> Markdown version of [/jobs/ext/4231049-security-analyst-i](https://www.wearedevelopers.com/jobs/ext/4231049-security-analyst-i). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Analyst I

- **Company:** Kforce Inc.
- **Location:** Houston, TX, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Azure, CompTIA Security+, Cyber Security, Computer Networks, Intrusion Detection and Prevention, Log Analysis, Microsoft Security Essentials, Networking Basics, Security Information and Event Management, Splunk
- **Published:** October 2, 2026
- **Apply:** https://www.dice.com/job-detail/3033b214-c1b9-488a-9114-625775b4e0d6

## About the Role

* Associate degree in Cybersecurity, IT, or related field; equivalent experience considered
 * CompTIA Security+ certification required
 * 2+ years of SOC or cybersecurity operations experience preferred
 * Experience with Splunk, Splunk SOAR, and Proofpoint
 * Knowledge of incident triage, escalation processes, networking fundamentals, and log analysis
 * Familiarity with Microsoft security technologies and Azure environments

Preferred:

 * CompTIA CySA+
 * Splunk Core Certified User
 * Microsoft Security certifications (SC-200, AZ-500)

This position is ideal for a motivated security professional seeking to grow their skills in threat detection, incident response, and security operations within a dynamic SOC environment.

## Description

Kforce has a client that is seeking a Security Analyst I in Houston, TX., The Tier 1 Cyber Security Analyst serves as the first line of defense within a 24/7 Security Operations Center (SOC), monitoring, investigating, and escalating security events. This role leverages SIEM and SOAR platforms to identify potential threats, conduct initial alert triage, and support incident response efforts., * Monitor and investigate security alerts from SIEM tools, including Splunk

 * Perform initial triage to determine severity, impact, and validity of alerts
 * Analyze logs, network traffic, endpoint activity, and email security events
 * Enrich alerts with threat intelligence and contextual data
 * Escalate incidents to Tier 2/3 teams following established procedures
 * Document findings, actions taken, and incident details in case management systems
 * Execute basic response and automation activities using Splunk SOAR
 * Support 24/7 SOC operations, including shift coverage and handoffs
 * Assist with detection tuning, reducing false positives, and continuous process improvement
 * Stay current on cybersecurity threats, vulnerabilities, and attack trends