Security Analyst I

Procom; Houston (TX); On-site; USD 65,000 - 90,000; Full time

Job summary

Procom in Houston, TX, is seeking a Security Analyst I to monitor, triage and escalate security events in a 24/7 SOC. You will use Splunk and Proofpoint to investigate alerts and follow incident response procedures.

This on-site contract role requires CompTIA Security+ and 2+ years in a 24/7 SOC, with nights, weekends, and holidays on/off-call as needed. Documentation and collaboration are essential.

Qualifications

• CompTIA Security+ certification required.
• associate degree or equivalent SOC experience.
• 2+ years in a 24/7 SOC environment.
• Experience with SIEM (Splunk), SOAR (Splunk SOAR), and Proofpoint.
• Knowledge of networking fundamentals and log analysis.
• Familiarity with Microsoft and Azure platforms.

Responsibilities

• Monitor security events and alerts from SIEM and other tools.
• Perform initial triage and investigation to determine severity and impact.
• Enrich alerts with context and threat intel.
• Escalate to Tier 2/3 per procedures and document actions.
• Execute basic response actions using SOAR and assist containment as needed.
• Support 24/7 SOC operations and participate in shift handoffs.
• Maintain situational awareness and help improve detection fidelity.

Skills

Analytical thinking

Attention to detail

Strong communication

Adaptability

Curiosity

Initiative

Team collaboration

Education

Associate degree in Cybersecurity or IT

Tools

Splunk

Splunk SOAR

Proofpoint

Microsoft Security tools

Azure security

Job description

Security Analyst I (SOC)Assignment DetailsDuration: 12-month contractLocation: On-site, Houston, TXSchedule: 24/7 SOC, including nights, weekends, and holidays (40-hour work week, on-call as needed/ emergencies)Hard requirement: CompTIA Security+ certification Position SummaryThe Security Analyst I handles initial monitoring, detection, triage, and escalation of security events in a 24/7 Security Operations Center (SOC). This role is the frontline of cyber defense, using SIEM and SOAR platforms to identify potential threats, investigate alerts, and escalate on time according to established incident response procedures. It suits a motivated, curious, analytically driven person who thinks critically, adapts quickly, and works well in a fast-paced environment. Key ResponsibilitiesMonitoring & Alert TriageMonitor security events and alerts from SIEM platforms (e.g., Splunk) and other security toolsPerform initial triage and investigation to determine severity, scope, and potential impactAnalyze logs, network activity, endpoint data, and email security alerts (e.g., Proofpoint)Enrich alerts with context such as threat intelligence, asset data, and user behaviorIncident Handling & EscalationFollow defined escalation paths to Tier 2/3 analysts based on severity, confidence, and impactDocument incidents, findings, and actions taken in case management systemsExecute basic response actions using SOAR platforms (e.g., Splunk SOAR)Assist with containment actions under guidanceSOC OperationsSupport 24/7 SOC operations, including shift workParticipate in shift handoffsMaintain situational awareness of threatsPlatform & Tool UsageUse Splunk SIEM and Splunk SOAR for automationInvestigate email threats using ProofpointWork with Microsoft and Azure security toolsContinuous ImprovementImprove alert fidelity and reduce false positivesProvide feedback for detection tuningStay current on emerging threatsRequired QualificationsCompTIA Security+ certificationAssociate degree in Cybersecurity, IT, or a related field, OR equivalent SOC experience2+ years in a 24/7 SOC environmentExperience with Splunk, Splunk SOAR, and ProofpointExperience triaging alerts and following escalation processesKnowledge of networking fundamentals and log analysisFamiliarity with Microsoft and Azure platformsPreferred CertificationsCompTIA CySA+Splunk Core Certified UserMicrosoft Security certifications (e.g., SC-200, AZ-500)Core CompetenciesAnalytical thinking, attention to detail, strong communication, adaptability, curiosity and initiative, team collaborationWorking Conditions24/7 SOC environment, including nights, weekends, and holidaysOn-call or extended hours during incidentsSuccess MetricsMean Time to Triage (MTTT)Escalation accuracyFalse positive reductionDocumentation qualitySLA adherenceThis posting is for an existing vacancy.