24/7 SOC Security Analyst - Triage & Incident Response

Insight Global; Houston (TX); On-site; USD 41,000 - 55,000; Full time

Job summary

Insight Global in Houston is seeking a Tier 1 Cyber Security Analyst to monitor and triage security events in a 24/7 SOC, using SIEM and SOAR tools.

The role requires initial alert investigation, escalation, and collaboration with Tier 2/3 analysts, with on-site work in Downtown Houston.

Strong knowledge of Splunk, Proofpoint, and Microsoft/Azure security tools, plus CompTIA Security+ certification.

Qualifications

• Associate degree in Cybersecurity, IT, or related field OR equivalent SOC experience.
• CompTIA Security+ Certification Required.
• Experience with Splunk, Splunk SOAR, Proofpoint.
• Experience triaging alerts and escalation processes.
• Knowledge of networking fundamentals and log analysis.
• Familiarity with Microsoft and Azure platforms.

Responsibilities

• Monitor security events and alerts from SIEM platforms (e.g., Splunk) and other security tools.
• Perform initial triage and investigation of alerts to determine severity, scope, and potential impact.
• Analyze logs, network activity, endpoint data, and email security alerts (e.g., Proofpoint).
• Enrich alerts with contextual data (threat intelligence, asset data, user behavior).
• Follow defined escalation paths to Tier 2/3 analysts based on severity, confidence, and impact.
• Document incidents, findings, and actions taken in case management systems.
• Execute basic response actions using SOAR platforms (e.g., Splunk SOAR).
• Assist in containment actions under guidance.
• Support 24/7 SOC operations, including shift work.

Skills

SOC monitoring

Incident response

Log analysis

SIEM familiarity

Cloud security (Azure)

Microsoft security tools

Proofpoint

Escalation procedures

Anomaly detection

Team collaboration

Education

Associate degree in Cybersecurity or related field

Tools

Splunk

Splunk SOAR

Proofpoint

Microsoft security tools

Azure security tools

Job description

Insight Global in Houston is seeking a Tier 1 Cyber Security Analyst to monitor and triage security events in a 24/7 SOC, using SIEM and SOAR tools.

The role requires initial alert investigation, escalation, and collaboration with Tier 2/3 analysts, with on-site work in Downtown Houston.

Strong knowledge of Splunk, Proofpoint, and Microsoft/Azure security tools, plus CompTIA Security+ certification.