Senior SOC Analyst: Threat Detection & IR (Austin)

Air InfoSec; Austin, Northern (TX, KY); Hybrid; USD 95,000 - 135,000; Full time

Job summary

Air InfoSec is seeking a SOC/Cybersecurity Analyst to support the Texas HHSC CSOC from its Austin office. The role involves advanced threat triage, alert validation, incident escalation, and collaboration with technical teams to contain and recover from incidents.

You will document investigations and help improve detection capabilities. The position requires 5 years of experience in security operations, monitoring, and incident response, with a strong background in cybersecurity frameworks.

Qualifications

• 5 years of experience triaging security alerts.
• 5 years of experience analyzing security events.
• 5 years of experience documenting incident investigations.
• 5 years of experience with cybersecurity frameworks.
• 5 years of experience with incident response processes.
• 5 years of experience with threat detection methodologies.
• 5 years of experience in security monitoring.
• 5 years of experience in security investigations.

Responsibilities

• Monitor, analyze, and triage cybersecurity alerts generated by SIEM, EDR, cloud security, email security, identity protection, and network security platforms.
• Conduct initial investigations of detected and reported security events to determine severity, scope, and impact.
• Identify, validate, and prioritize potential cybersecurity incidents, escalating confirmed threats according to established procedures.
• Correlate security events from multiple data sources, including endpoints, firewalls, intrusion detection and prevention systems, cloud services, and threat intelligence feeds.
• Review and analyze indicators of compromise, suspicious network activity, phishing emails, malware detections, and anomalous user behavior.
• Document investigations, findings, and response actions in ticketing and case management systems.
• Assist with incident containment, eradication, and recovery efforts by coordinating with technical teams and stakeholders.
• Report and elevate findings to the CSOC Team Lead and/or SOC Manager.
• Support continuous improvement of threat detection capabilities through alert tuning, process refinement, and threat intelligence integration.
• Perform vulnerability assessment reviews and support development of operational procedures, playbooks, and knowledge base articles.

Skills

Security operations

Threat detection

Security monitoring

Documentation

Vulnerability assessment

Education

Bachelor's degree in cybersecurity or related field

Tools

Microsoft Sentinel

Splunk

CrowdStrike

Tenable

Qualys

Zscaler

Prisma

Job description

Air InfoSec is seeking a SOC/Cybersecurity Analyst to support the Texas HHSC CSOC from its Austin office. The role involves advanced threat triage, alert validation, incident escalation, and collaboration with technical teams to contain and recover from incidents.

You will document investigations and help improve detection capabilities. The position requires 5 years of experience in security operations, monitoring, and incident response, with a strong background in cybersecurity frameworks.