Cyber Threat Detection Analyst I — CSOC (Austin Onsite)

COOLSOFT; Austin (TX); On-site; USD 65,000 - 85,000; Full time

Job summary

COOLSOFT in Austin, TX is seeking a Network Security Analyst I to join our Cybersecurity Operations Center on-site at 701 W 51st Street, Austin, TX. You will monitor, triage, and analyze cybersecurity alerts and coordinate incident response to protect agency information systems, networks, and data.

The role requires 1-3 years of experience, knowledge of SIEM, EDR, and network security concepts, and the ability to work with cross-functional teams to minimize risk.

Qualifications

• 1-3 years of experience in the field or in a related area.
• Knowledge of commonly used concepts, practices, and procedures within a particular field.
• Ability to maintain the security and integrity of critical infrastructure systems by preventing unauthorized access and ensuring compliance with laws and regulations related to national security and foreign ownership restrictions.

Responsibilities

• Monitors, analyzes, and triages cybersecurity alerts from security platforms.
• Conducts initial investigations of detected security events to determine severity and impact.
• Identifies, validates, and prioritizes potential cybersecurity incidents and escalates accordingly.
• Correlates security events from multiple data sources (endpoints, firewalls, IDS/IPS, cloud, authentication).
• Reviews indicators of compromise and anomalous user behavior.
• Documents investigations and responses in ticketing systems for tracking and reporting.
• Assists with containment, eradication, and recovery with technical teams.
• Reports to CSOC Team Lead or SOC Manager.
• Supports continuous improvement of threat detection capabilities through alert tuning.

Skills

Cybersecurity concepts

Threat detection

SIEM

EDR

Incident response

Tools

SIEM

EDR

Firewall

IDS/IPS

Cloud security

Job description

COOLSOFT in Austin, TX is seeking a Network Security Analyst I to join our Cybersecurity Operations Center on-site at 701 W 51st Street, Austin, TX. You will monitor, triage, and analyze cybersecurity alerts and coordinate incident response to protect agency information systems, networks, and data.

The role requires 1-3 years of experience, knowledge of SIEM, EDR, and network security concepts, and the ability to work with cross-functional teams to minimize risk.