Security Operations Analyst II — On-Site Austin

Digerati Systems Inc.; Austin (TX); On-site; USD 110,000 - 165,000; Full time

Job summary

Digerati Systems Inc. seeks a Network Security Analyst II for on-site work in Austin, TX. The role supports enterprise security operations across on-premises and cloud environments, focusing on detection engineering and incident response.

The ideal candidate will have hands-on experience with SIEM (Microsoft Sentinel), SOAR, EDR, and network threat detection, with strong analytical and communication skills to translate technical findings to leadership.

Qualifications

• Minimum seven years of cybersecurity or related security operations experience.
• Hands-on with Microsoft Sentinel including incident management, analytics rules, workbooks, automation, and data connectors.
• Experience using SIEM for log analysis, alert investigation, and dashboarding.
• Experience with NDR for network traffic analysis and incident support.
• Experience with EDR tools for endpoint investigation and response actions.
• Knowledge of firewalls, IDS/IPS, DNS, VPN, TCP/IP, and secure network architecture.
• Familiarity with NIST/CIS HIPAA/state security requirements.

Responsibilities

• Monitor security alerts, logs, network events, and endpoint telemetry.
• Analyze suspicious activity and determine scope, impact, and response actions.
• Conduct incident triage, investigation, escalation, containment, and documentation.
• Develop and tune detection rules, dashboards, alerts, and playbooks.
• Support threat hunting using KQL, SPL, and endpoint telemetry.
• Collaborate with teams to validate security events and mitigate risk.
• Maintain operational documentation and leadership-ready summaries.

Skills

SIEM

SOAR

EDR

XDR

Threat hunting

KQL

SPL

Education

Bachelor’s degree in cybersecurity/computer science/IT

Tools

KQL

SPL

Splunk

Job description

Digerati Systems Inc. seeks a Network Security Analyst II for on-site work in Austin, TX. The role supports enterprise security operations across on-premises and cloud environments, focusing on detection engineering and incident response.

The ideal candidate will have hands-on experience with SIEM (Microsoft Sentinel), SOAR, EDR, and network threat detection, with strong analytical and communication skills to translate technical findings to leadership.