Senior SOC Analyst

Allied Consultants, Inc.; Austin (TX); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Life insurance

401K match

Cafeteria plan

Job summary

Allied Consultants, Inc in Austin, TX is seeking an experienced Senior SOC Analyst to join a high-impact security operations team. You will monitor, detect, investigate, and respond to security events across on-premises, cloud, and endpoint environments.

The ideal candidate has hands-on experience with Microsoft Sentinel, SIEM, EDR, NDR, and threat hunting, and can communicate findings to technical and non-technical stakeholders while maintaining regulatory compliance.

Qualifications

• Minimum 7 years in cybersecurity or related role.
• Hands-on experience with Microsoft Sentinel.
• Experience with SIEM for log analysis and monitoring.
• Experience with EDR, NDR, and related security tooling.
• Knowledge of standards like NIST, CIS, HIPAA.

Responsibilities

• Monitor security alerts, logs, and threat intel feeds.
• Investigate incidents and coordinate containment across teams.
• Develop detection rules, dashboards, and playbooks.
• Support vulnerability and risk assessments for security infrastructure.
• Document findings and communicate to leadership.
• Maintain awareness of emerging cyber threats in healthcare/public sectors.

Skills

Microsoft Sentinel

SIEM

NDR

EDR

Security operations

KQL

SPL

Communication

Threat intelligence concepts

Education

Bachelor’s degree in cybersecurity / related field

Job description

Overview

Allied Consultants, Inc is a proudly Austin based firm with over 34 years of experience delivering top-tier technical and business professionals within Texas State Agencies. We are currently seeking an experience Senior SOC Analystto play a key role within a high-impact technical services team.

At Allied Consultants, we value our consultants and are committed to providing an exceptional experience including:

• Highly competitive pay rates
• Local support staff for responsive, personal service
• Comprehensive benefits package, including:
  • Medical insurance (with employer cost sharing)
  • Life insurance
  • A 401(K) plan with company match
  • Flexible spending through a cafeteria plan

Candidates selected for interviews will be subject to a criminal background check and may be required to pass a drug screening, in compliance with federal and state regulations. All offers of employment are contingent upon successful completion of these checks.

Allied Consultants is a proud to be an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Responsibilities

4-7 years of experience in the field or in a related area. Familiar with standard concepts, practices, and procedures within a particular field. Relies on limited experience and judgement to plan and accomplish goals. A certain degree of creativity and latitude is required. Works under limited supervision with considerable latitude for the use of initiative and independent judgement. Ability to maintain the security and integrity of critical infrastructure systems by preventing unauthorized access and ensuring compliance with laws and regulations related to national security and foreign ownership restrictions.

A network security analyst ensures that information systems and computer networks are secure. This includes protecting the company against hackers and cyber-attacks, as well as monitoring network traffic and server logs for activity that seems unusual. Additionally, these analysts are responsible for finding vulnerabilities in the computer networks and creating recommendations for how to minimize these vulnerabilities. The network security analyst investigates security breaches, develops strategies for any security issues that arise, and utilizes the help of firewalls and antivirus software to maintain security. DISCLAIMER: Candidates for this position will be subject to a pre-employment security review to determine employment eligibility.

The position is expected to work onsite at client's in Austin, TX full-time, Monday - Friday during agency business hours.

Job Summary

The Network Security Analyst II performs advanced cybersecurity and network security analysis work in support of client's enterprise security operations. This role is responsible for monitoring, detecting, investigating, and responding to security events across on-premises, cloud, and endpoint environments. The ideal candidate is a hands-on security operations professional with strong experience across SIEM, SOAR, EDR, network detection, and incident response platforms. This role requires sound judgement, technical depth, attention to detail, and a strong commitment to protecting client's systems, data, and services that support the health and well-being of Texans.

Essential Job Functions

• Monitor security alerts, logs, network events, endpoint telemetry, and threat intelligence feeds.
• Analyze suspicious activity, anomalous network behavior, malware indicators, endpoint detections, and SIEM correlation events to determine scope, impact, and required response actions.
• Perform incident triage, investigation, escalation, containment coordination, and documentation in alignment with client's security operations procedures.
• Develop, tune, and maintain detection rules, dashboards, alerts, playbooks, and queries to improve visibility across network, endpoint, identity, and cloud environments.
• Support threat hunting activities using KQL, SPL, packet/session analysis, endpoint telemetry, and other investigative techniques.
• Assist with vulnerability, risk, and control assessments for network security infrastructure and enterprise information systems.
• Document findings, prepare incident reports, track corrective actions, and communicate technical information to security leadership and business stakeholders.
• Collaborate with network, infrastructure, cloud, endpoint, and application teams to validate security events and implement risk mitigation measures.
• Maintain awareness of emerging cyber threats, attack techniques, indicators of compromise, and security best practices relevant to healthcare and public-sector environments.
• Support compliance, audit, and reporting activities by providing evidence, metrics, and security operations documentation as requested.

Required Qualifications

• Minimum of seven years of experience in cybersecurity, network security, security operations, incident response, or a closely related information security role.
• Hands-on experience with Microsoft Sentinel, including incident management, analytics rules, workbooks, automation, data connectors, and Kusto Query Language.
• Experience using SIEM for log analysis, alert investigation, dashboarding, correlation searches, and security monitoring.
• Experience with NDR for network traffic analysis, packet/session investigation, threat detection, and incident support.
• Experience with EDR tools, including endpoint alert triage, device investigation, advanced hunting, and response actions.
• Working knowledge of network security concepts, including firewalls, IDS/IPS, proxy logs, DNS, VPN, TCP/IP, segmentation, and secure network architecture.
• Ability to analyze complex security events, correlate data across multiple sources, and produce clear written documentation and recommendations.
• Knowledge of security frameworks, standards, and regulatory considerations such as NIST, CIS Controls, HIPAA, and state information security requirements.
• Strong communication, collaboration, problem-solving, and analytical skills.

Preferred Education and Certifications

• Bachelor’s degree in cybersecurity, computer science, information systems, information technology, or a related field. Relevant experience may be considered in place of education where applicable.
• Microsoft security certifications are strongly preferred, such as Microsoft Certified: Security Operations Analyst Associate, Microsoft Certified: Cybersecurity Architect Expert, Microsoft Certified: Azure Security Engineer Associate, or Microsoft 365 Defender-related certifications.
• Additional preferred certifications include CompTIA Security+, CySA+, GIAC security certifications, CISSP, CISM, CISA, Splunk Core Certified Power User, Splunk Enterprise Security Certified Admin, or SentinelOne product certifications.

Knowledge, Skills, and Abilities

• Knowledge of SIEM, SOAR, EDR, XDR, network detection and response, log management, and threat intelligence concepts.
• Skill in writing and interpreting KQL, SPL, and security queries to support investigations and reporting.
• Skill in identifying indicators of compromise, attacker tactics, suspicious network patterns, and endpoint-based threats.
• Ability to prioritize alerts, document investigative steps, and elevate incidents based on severity and business impact.
• Ability to work independently and collaboratively in a security operations environment with shifting priorities and time-sensitive incidents.
• Ability to communicate cybersecurity risks, findings, and recommended actions to both technical and non-technical audiences.

Work Expectations

• Participate in incident response, escalation, and after-action review activities as needed.
• Support enterprise security monitoring for systems that process, store, or transmit sensitive information.
• Follow client's policies, procedures, standards, and applicable state and federal security requirements.
• Maintain accurate operational documentation, investigation notes, metrics, and leadership-ready summaries.
• May be required to provide support outside normal business hours during high-priority security incidents or planned maintenance activities.

Qualifications

Minimum Requirements:Candidates that do not meet or exceed the minimum stated requirements (skills/experience) will be displayed to customers but may not be chosen for this opportunity.

Years

Required/Preferred

Experience

7

Required

Knowledge of SIEM, SOAR, EDR, XDR

7

Required

Experience with security log collection and management

7

Required

Experience with threat intelligence concepts

7

Required

Skill in writing and interpreting KQL, SPL, and security queries to support investigations and reporting

7

Required

Experience in SIEM platform/architecture support

7

Required

Experience in detection engineering methodology and implementation

10

Preferred

Knowledge of SIEM, SOAR, EDR, XDR, NDR

10

Preferred

Experience with security log collection and management

10

Preferred

Experience with threat intelligence concepts

10

Preferred

Skill in writing and interpreting KQL, SPL, and security queries to support investigations and reporting

10

Preferred

Experience in SIEM platform/architecture support

10

Preferred

Experience in detection engineering methodology and implementation