Onsite Network Security Analyst - Threat Detection Lead

InnoSoul, Inc.; Austin (TX); On-site; USD 95,000 - 130,000; Full time

Job summary

innoSoul, Inc. seeks a Network Security Analyst to join the CSOC in Austin, TX. The role focuses on advanced cybersecurity analysis, threat triage, and incident escalation to protect agency information systems, networks, and data.

You will monitor SIEM/EDR/cloud security, investigate suspicious activity, and coordinate response with security engineers and stakeholders. Applicants must have 5+ years in security operations and relevant certifications.

Qualifications

• Minimum of five (5) years in cybersecurity operations.
• Experience with SIEMs, EDR/XDR, IDS/IPS, and cloud security.
• Experience triaging security alerts and documenting investigations.
• Familiarity with MITRE ATT&CK and NIST frameworks.
• Ability to work in a 24/7 CSOC environment.

Responsibilities

• Monitor and triage cybersecurity alerts from SIEM/EDR/IDS/IPS and cloud security.
• Investigate detected events to determine severity and scope.
• Escalate threats according to procedures to Incident Response or SOC teams.
• Correlate events from endpoints, firewalls, IDS/IPS and threat feeds.
• Document investigations and actions in case management systems.
• Assist containment, eradication, and recovery efforts.

Skills

SIEM monitoring

Threat triage

Incident response

EDR/XDR

Firewall tech

Windows/Linux

PowerShell/Python

Threat intel

Threat detection

SOC operations

Tools

NetWitness

Splunk

QRadar

ArcSight

LogRhythm

CrowdStrike

SentinelOne

Trellix

FireEye

Proofpoint

Google Threat Intelligence

Tenable

Qualys

Rapid7

Microsoft Defender for Endpoint

Microsoft Sentinel

Google Wiz

MDCA

Cortex Cloud

Sysdig

Zscaler

Prisma

Netskope

Job description

innoSoul, Inc. seeks a Network Security Analyst to join the CSOC in Austin, TX. The role focuses on advanced cybersecurity analysis, threat triage, and incident escalation to protect agency information systems, networks, and data.

You will monitor SIEM/EDR/cloud security, investigate suspicious activity, and coordinate response with security engineers and stakeholders. Applicants must have 5+ years in security operations and relevant certifications.