Cyber Defense Analyst I – SOC & Threat Detection

Ampcus Inc; Austin (TX); On-site; USD 70,000 - 90,000; Full time

Job summary

Ampcus Inc in Austin, TX is seeking a Network Security Analyst I to monitor and triage cybersecurity alerts within a CSOC. You will use SIEM, EDR, and other security tools to identify threats, assess risk, and coordinate incident response with engineering teams.

Candidates will be subject to a pre-employment security review. The role emphasizes incident handling, threat hunting coordination, and continuous improvement of detection capabilities.

Qualifications

• Minimum of five (5) years of experience in cybersecurity operations, security monitoring, incident response, threat detection, security investigations, or related cybersecurity disciplines.
• Experience triaging security alerts, analyzing security events, and documenting incident investigations.
• Experience with cybersecurity frameworks, incident response processes, and threat detection methodologies.
• Knowledge of CSOC/SOC operations and best practices.
• Strong documentation and leadership-ready communications.

Responsibilities

• Monitor, triage, and analyze cybersecurity alerts from SIEM, EDR/XDR, cloud security, email security, identity protection, and network security platforms.
• Conduct initial investigations to determine severity, scope, and impact on operations.
• Identify, prioritize, and escalate potential incidents per procedures.
• Correlate events from multiple data sources (endpoints, firewalls, IDS/IPS, cloud services).
• Review IOCS, suspicious activity, phishing, malware detections, and anomalous behavior.
• Document investigations and actions in ticketing systems; support containment and recovery with teams.
• Escalate to CSOC Team Lead or SOC Manager; contribute to threat detection improvements.

Skills

CSOC operations

Threat triage

SIEM/EDR

MITRE ATT&CK

Threat intel

Windows/Linux

Incident response

Query languages

PowerShell/Python

Education

Bachelor degree in cybersecurity/CS

Tools

Splunk

Microsoft Sentinel

CrowdStrike

Zscaler

Trellix

Qualys

Threat intelligence sources

Job description

Ampcus Inc in Austin, TX is seeking a Network Security Analyst I to monitor and triage cybersecurity alerts within a CSOC. You will use SIEM, EDR, and other security tools to identify threats, assess risk, and coordinate incident response with engineering teams.

Candidates will be subject to a pre-employment security review. The role emphasizes incident handling, threat hunting coordination, and continuous improvement of detection capabilities.