Network Security Analyst II: SIEM, EDR & Threat Hunting

Akaasa Technologies; Austin (TX); On-site; USD 95,000 - 125,000; Full time

Job summary

Texas Health and Human Services Commission seeks a Network Security Analyst II to monitor and respond to security events across on‑premises, cloud, and endpoint environments. You will develop detection rules and work with cross‑functional teams to improve resilience.

The role demands hands‑on security operations expertise with SIEM, SOAR, EDR, and network detection, plus the ability to document findings for leadership and stakeholders.

Qualifications

• Seven years of experience in cybersecurity, network security, security operations, or related role.
• Hands-on with Microsoft Sentinel including incident management, analytics, and data connectors.
• Experience with SIEM log analysis, alert investigation, and dashboarding.
• Experience with network detection and response and incident support.
• Knowledge of threat intelligence concepts and detection engineering methodology.

Responsibilities

• Monitor security alerts, logs, network events, endpoint telemetry, and threat intel feeds.
• Analyze suspicious activity, anomalous network behavior, malware indicators, and SIEM events to determine scope and actions.
• Perform incident triage, investigation, escalation, containment coordination, and documentation.
• Develop, tune, and maintain detection rules, dashboards, alerts, playbooks, and queries for visibility across environments.
• Support threat hunting activities using KQL, SPL, and other investigative techniques.
• Collaborate with teams to validate security events and implement risk mitigations.

Skills

SIEM

SOAR

EDR

XDR

NDR

KQL

SPL

Security queries

Education

Bachelor's degree in cybersecurity or related field

Tools

Microsoft Sentinel

EDR tools

Job description

Texas Health and Human Services Commission seeks a Network Security Analyst II to monitor and respond to security events across on‑premises, cloud, and endpoint environments. You will develop detection rules and work with cross‑functional teams to improve resilience.

The role demands hands‑on security operations expertise with SIEM, SOAR, EDR, and network detection, plus the ability to document findings for leadership and stakeholders.