Security Operations Engineer — Incident Response & SIEM

Atmos Energy; Dallas (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

Atmos Energy is seeking a Security Analyst to manage the SIEM environment, analyze incidents, and coordinate with IT engineering and SOC teams. The role requires experience in incident response, scripting, and network security across UNIX/Linux and Windows platforms.

You will stay current with threats, perform logging and traffic analyses, and support the deployment of security controls. The role may require on-call during emergencies.

Qualifications

• Bachelor's degree in Computer Science or closely related field plus four years in Information Security or equivalent.
• Experience with SIEM solutions and incident response in large networks.
• Solid understanding of UNIX/Linux, Windows, networking, and encryption concepts.
• Knowledge of PCI, forensics or vulnerability management is a plus.

Responsibilities

• Manage SIEM and analyze incidents from multiple sources for severity and risk.
• Prioritize investigations and advise responders on steps to resolve incidents.
• Identify, report, and resolve security incidents and track investigations to resolution.
• Compose security alert notifications and deploy security controls to detect events.
• Maintain knowledge of threats, vulnerabilities, and countermeasures from sources like ICS-CERT.
• Develop reports and trend analyses; reduce false positives through tuning.
• Write scripts to automate security triage tasks.
• Coordinate with IT engineering and security operations as a secondary interface.
• Participate in planning/execution of contracted security services.

Skills

SIEM

IR skills

Python

UNIX/Linux

Log analysis

NIST

Education

Bachelor's degree in CS or related field

Tools

Wireshark

Syslog technologies

Job description

Atmos Energy is seeking a Security Analyst to manage the SIEM environment, analyze incidents, and coordinate with IT engineering and SOC teams. The role requires experience in incident response, scripting, and network security across UNIX/Linux and Windows platforms.

You will stay current with threats, perform logging and traffic analyses, and support the deployment of security controls. The role may require on-call during emergencies.