Security Operations Analyst - Protect & Respond -Flex Hours

JW Affinity IT; Dallas (TX); On-site; USD 70,000 - 110,000; Full time

Benefits offered by this job

401k matching

Life Insurance

PTO

Disability insurance

Internet & phone allowance

Wellness resources

Pet insurance

Work-life balance

Flexible hours

Full-time

Job summary

JW Affinity IT in Dallas, TX seeks a cybersecurity professional to monitor and respond to security events across district systems, networks, and cloud services. You will triage alerts, analyze logs, support containment and recovery, and contribute to threat hunting and security improvements.

The role requires a Bachelor's degree in cybersecurity or related field, 3–5 years in security operations or incident response, and hands-on SIEM/EDR experience.

Qualifications

• Bachelor's degree in cybersecurity, information technology, or a related field, or equivalent experience
• 3–5 years of security operations, incident response, or systems/network security experience
• Hands-on experience with SIEM, EDR, email security, vulnerability tools, log analysis, and incident-handling procedures
• Understanding of common threats, MITRE ATT&CK, networking, Windows/Linux, and cloud security
• Strong analytical and documentation skills. Security+, CySA+, GCIH, or similar certification preferred.

Responsibilities

• Monitors, investigates, and responds to cybersecurity events affecting district systems, networks, cloud services, and endpoints.
• Triages alerts, analyzes logs, supports containment and recovery, tunes detection tools, manages cases, documents findings, and contributes to threat hunting and security improvement efforts.

Skills

SIEM

EDR

Email security

Vulnerability tools

Log analysis

Incident response

MITRE ATT&CK

Networking

Windows

Linux

Cloud security

Analytical skills

Documentation

Education

Bachelor's degree in cybersecurity

Tools

SIEM tools

EDR tools

Vulnerability tools

Job description

JW Affinity IT in Dallas, TX seeks a cybersecurity professional to monitor and respond to security events across district systems, networks, and cloud services. You will triage alerts, analyze logs, support containment and recovery, and contribute to threat hunting and security improvements.

The role requires a Bachelor's degree in cybersecurity or related field, 3–5 years in security operations or incident response, and hands-on SIEM/EDR experience.