Looking for Network Security Analyst - SOC Operations with Public Sector Experience in Austin, TX Onsite Job

KPG99 INC; Austin (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

KPG99 INC is seeking a Network Security Analyst to perform advanced cybersecurity analysis and threat triage within its Cybersecurity Operations Center (CSOC). You will monitor, triage, analyze, and prioritize alerts, collaborate with Incident Response, Threat Hunting, or SOC Engineering teams, and act as the primary contact for security event analysis.

The role requires the ability to work in a 24x7 environment and may include after-hours support during high-priority incidents.

Qualifications

• Bachelor's degree or equivalent experience in cybersecurity preferred.
• Experience triaging security alerts and analyzing events.
• Familiarity with SIEM, EDR/XDR, and threat intelligence feeds.

Responsibilities

• Monitor, triage, analyze, and prioritize cybersecurity alerts; investigate suspicious activity; coordinate incident response activities to protect agency systems, networks, and data.
• Serve as a primary point of contact for security event analysis, threat identification, and incident escalation.
• Correlate events across endpoints, firewalls, IDS/IPS, cloud services, authentication systems, and threat intel feeds to identify indicators of compromise and anomalous user behavior.
• Work independently and as part of a 24x7 CSOC operations team; may support outside normal hours during high-priority security incidents.

Skills

Alert triage

Security events analysis

Cybersecurity frameworks

Incident response processes

Threat detection methods

Cybersecurity operations

Security monitoring

Incident response

Threat detection

Security investigations

Related cybersecurity disciplines

5+ years preferred

Education

Four-year degree in cybersecurity or related field

Job description

TITLE: Network Security Analyst - SOC Operations

LOCATION: Onsite at 701 W. 51st Street, Austin, TX 78751. Candidates must currently reside in the Austin metropolitan area.

DURATION: Up to 1,992 hours through August 31, 2027, the end of the State fiscal year, with anticipated extensions.

Interview: WebEx and In-person

PUBLIC SECTOR EXPERIENCE in the client field, i.e., education means past experience in EDUCATION; retirement means past experience in retirement/insurance, etc. This has been proven by past success.

Must-Have:

Public Sector

JOB DESCRIPTION/MINIMUM REQUIREMENTS:

HHSC is seeking a Network Security Analyst to perform advanced cybersecurity analysis and threat triage within its Cybersecurity Operations Center (CSOC). The position will continuously monitor, triage, analyze, and prioritize cybersecurity alerts; investigate suspicious activity; identify potential threats; and coordinate incident response activities to protect agency systems, networks, and data. The analyst will serve as a primary point of contact for security event analysis, threat identification, and incident escalation.

The analyst will monitor and analyze alerts generated by SIEM, EDR/XDR, cloud security, email security, identity protection, and network security platforms. Responsibilities include conducting initial investigations to determine severity, scope, impact, and risk; validating and prioritizing potential incidents; and escalating confirmed threats to Incident Response, Threat Hunting, or SOC Engineering teams. The analyst will correlate events across endpoints, firewalls, IDS/IPS, cloud services, authentication systems, and threat intelligence feeds and will analyze indicators of compromise (IOCs), suspicious network activity, phishing emails, malware detections, and anomalous user behavior.

The analyst must be able to work independently and as part of a 24x7 cybersecurity operations team. Normal business hours are Monday through Friday, 8:00 AM to 5:00 PM, but support outside normal hours, including evenings, weekends, and holidays, may be required during high-priority security incidents.

A four-year degree in cybersecurity, information security, computer science, computer information systems, management information systems, or a related field is preferred, although relevant education and experience may substitute for one another. Preferred certifications include CompTIA Security+, GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), Certified SOC Analyst (CSA), Microsoft Cybersecurity Analyst (SC-200), or other GIAC/SOC-related certifications.

Years

Required/Preferred

Skills/Experience

• 3
  Required
  Experience triaging security alerts
• 3
  Required
  Experience analysing security events
• 3
  Required
  Experience with cybersecurity frameworks
• 3
  Required
  Experience with incident response processes
• 3
  Required
  Experience with threat detection methodologies
• 3
  Required
  Experience in cybersecurity operations
• 3
  Required
  Experience in security monitoring
• 3
  Required
  Experience in incident response
• 3
  Required
  Experience in threat detection
• 3
  Required
  Experience in security investigations
• 3
  Required
  Experience in related cybersecurity disciplines
• 5
  Preferred

Please See Job Description Section for more specific Preferred and Required Skills.