Network Security Analyst II — SIEM & Threat Hunting

Nexiva Inc; Austin (TX); On-site; USD 110,000 - 150,000; Part time

Job summary

Nexiva Inc is seeking an experienced Network Security Analyst II to support enterprise cybersecurity and security operations in Austin, onsite. The role involves monitoring, detecting, and responding to security events across network, endpoint, identity, cloud, and on-prem environments, with hands-on MS Sentinel and SIEM/SOAR expertise.

The ideal candidate will have strong experience with KQL, SPL, threat intelligence, detection engineering, incident response, and security-query languages, plus

Qualifications

• At least seven years of experience in cybersecurity or related info-security role.
• Seven years of experience with SIEM, SOAR, EDR, XDR, and NDR technologies.
• Seven years of experience with security-log collection, management, analysis, and monitoring.
• Seven years of experience applying threat-intelligence concepts.
• Seven years of experience writing and interpreting KQL, SPL, or similar security queries.
• Seven years of experience supporting SIEM platforms and architecture.
• Seven years of experience with detection-engineering methodologies and implementation.

Responsibilities

• Monitor security alerts, logs, endpoint telemetry, threat-intelligence feeds, and security events.
• Investigate suspicious activity, malware indicators, anomalous network behavior, endpoint detections, and SIEM correlation events.
• Determine scope, impact, severity, and appropriate response to cybersecurity incidents.
• Perform incident triage, investigation, escalation, containment coordination, and documentation.
• Develop, tune, and maintain SIEM detection rules, alerts, dashboards, workbooks, queries, automation, and response playbooks.
• Support threat-hunting activities using KQL, SPL, packet and session analysis, endpoint telemetry, and other investigative techniques.
• Analyze network traffic using NDR tools to identify threats and support incident investigations.
• Perform endpoint alert triage, device investigations, advanced hunting, and response actions using EDR tools.
• Support vulnerability, risk, and control assessments for network infrastructure and enterprise information systems.
• Identify indicators of compromise and attacker tactics; correlate data across sources and produce findings and recommendations.
• Prepare incident reports, document findings, track corrective actions, and communicate recommendations.
• Collaborate with network, infrastructure, cloud, endpoint, identity, and application teams to validate events and mitigate risks.
• Support compliance, audit, and security-reporting activities with evidence and metrics.
• Maintain awareness of emerging threats and best practices relevant to healthcare and public-sector environments.
• Participate in incident-response escalation and after-action reviews.

Skills

SIEM

SOAR

EDR

XDR

NDR

KQL

SPL

Threat intelligence

Incident response

Detection engineering

Security queries

Firewall/IDS/IPS knowledge

Tools

Microsoft Sentinel

NDR tools

EDR tools

SIEM platforms

Kusto Query Language

Job description

Nexiva Inc is seeking an experienced Network Security Analyst II to support enterprise cybersecurity and security operations in Austin, onsite. The role involves monitoring, detecting, and responding to security events across network, endpoint, identity, cloud, and on-prem environments, with hands-on MS Sentinel and SIEM/SOAR expertise.

The ideal candidate will have strong experience with KQL, SPL, threat intelligence, detection engineering, incident response, and security-query languages, plus