Security Operations Analyst I - Threat Detection & IR

Jobtailor; Austin (TX); On-site; USD 95,000 - 130,000; Full time

Job summary

Jobtailor in Austin, TX is seeking a cybersecurity analyst to perform advanced analysis and threat triage within the CSOC. You will monitor alerts from SIEM, EDR, cloud, and identity tools; investigate incidents; and collaborate with IR and SOC teams to support containment and remediation.

Ideal candidates have 3+ years of experience, strong knowledge of NIST frameworks, and proven ability to produce concise reports. The role may require on-site work in Austin and occasional after-hours coverage.

Qualifications

• 3+ years of experience triaging security alerts and investigating incidents.
• Experience with SIEM/XDR platforms and incident response.
• Strong knowledge of NIST frameworks and CSOC processes.
• Ability to produce clear, concise reports and summaries.
• Must reside in the Austin area; capable of working on-site as needed.

Responsibilities

• Perform advanced cybersecurity analysis and threat triage in the CSOC.
• Monitor and triage alerts from SIEM, EDR, cloud, and identity platforms.
• Investigate alerts to assess severity, scope, and risk.
• Coordinate with Incident Response and SOC teams for containment and recovery.
• Correlate events from firewalls, IDS/IPS, and threat intel feeds.
• Document investigations and findings in ticketing systems.
• Assist containment, eradication, and recovery efforts with stakeholders.
• Improve threat detection via alert tuning and threat intel integration.
• Produce high-quality investigation summaries for CSOC leadership.
• Report activities to CSOC leadership and guidance to peers.

Skills

Incident response

Threat triage

Security analysis

Documentation

Communication

Independent work

Education

Bachelor’s degree in Cybersecurity or related field

Equivalent experience accepted

Tools

NetWitness

Microsoft Sentinel

Splunk

QRadar

ArcSight

Tenable

Qualys

Proofpoint

CrowdStrike

Microsoft Defender for Endpoint

Zscaler

Cisco Talos

Google Threat Intelligence

Job description

Jobtailor in Austin, TX is seeking a cybersecurity analyst to perform advanced analysis and threat triage within the CSOC. You will monitor alerts from SIEM, EDR, cloud, and identity tools; investigate incidents; and collaborate with IR and SOC teams to support containment and remediation.

Ideal candidates have 3+ years of experience, strong knowledge of NIST frameworks, and proven ability to produce concise reports. The role may require on-site work in Austin and occasional after-hours coverage.