Network Security Analyst (Onsite)

Vitaver & Associates, Inc; Austin (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

Vitaver & Associates, Inc. seeks a Network Security Analyst for an onsite, 12-month project in Austin, TX. This temporary assignment requires 100% presence at the client site with no telecommuting. Start ASAP with a 12-month duration and potential extensions.

Ideal candidates have extensive experience in SIEM, threat intel, and security query languages (KQL, SPL), and can develop detection rules, dashboards, and playbooks to support investigations and reporting. This is a hands-on security role.

Qualifications

• 7 years of experience with SIEM, SOAR, EDR, XDR, NDR.
• 7 years of experience with security log collection and management.
• 7 years of threat intelligence concepts.
• 7 years of writing security queries (KQL, SPL).
• 7 years in SIEM platform/architecture support.
• 7 years in detection engineering methodology.

Responsibilities

• Monitor security alerts, logs, network events and threat intel feeds.
• Analyze suspicious activity, network behavior, malware indicators and SIEM events.
• Conduct incident triage, investigation, escalation and containment coordination.
• Develop and maintain detection rules, dashboards, alerts and playbooks.
• Support threat hunting using KQL, SPL, packet analysis and telemetry.
• Assist with vulnerability, risk, and control assessments for network security.
• Document findings, prepare incident reports and communicate to security leadership.

Tools

SIEM

SOAR

EDR

XDR

NDR

Log collection

KQL

SPL

SIEM architecture

Detection engineering

Job description

14907 - Network Security Analyst (Onsite) - Austin, TX

Start Date: ASAP

Type: Temporary Project.

Estimated Duration: 12 months with possible extensions

Work Setting: 100% of the time at the Client's site. No telecommuting or remote work. This is a non-negotiable requirement from the client.

Required:

• Availability to work 100% of the time at the Client's site in Austin, TX.


• Experience with SIEM, SOAR, EDR, XDR, NDR (7 years);


• Experience with security log collection and management (7 years);


• Experience with threat intelligence concepts (7 years);


• Experience in writing and interpreting KQL, SPL, and security queries to support investigations and reporting (7 years);


• Experience with SIEM platform/architecture support (7 years);


• Experience in detection engineering methodology and implementation (7 years).

Preferred:

• Experience with SIEM, SOAR, EDR, XDR, NDR (10 years);


• Experience with security log collection and management (10 years);


• Experience with threat intelligence concepts (10 years);


• Experience in writing and interpreting KQL, SPL, and security queries to support investigations and reporting (10 years);


• Experience with SIEM platform/architecture support (10 years);


• Experience in detection engineering methodology and implementation (10 years).

Responsibilities:

• Monitor security alerts, logs, network events, endpoint telemetry, and threat intelligence feeds.


• Analyze suspicious activity, anomalous network behavior, malware indicators, endpoint detections, and SIEM correlation events to determine scope, impact, and required response actions.


• Perform incident triage, investigation, escalation, containment coordination, and documentation in alignment with the Client's security operations procedures.


• Develop, tune, and maintain detection rules, dashboards, alerts, playbooks, and queries to improve visibility across network, endpoint, identity, and cloud environments.


• Support threat hunting activities using KQL, SPL, packet/session analysis, endpoint telemetry, and other investigative techniques.


• Assist with vulnerability, risk, and control assessments for network security infrastructure and enterprise information systems.


• Document findings, prepare incident reports, track corrective actions, and communicate technical information to security leadership and business stakeholders.