Senior SOC / SIEM Security Analyst

Evolve Esolutions LLC; Austin (TX); On-site; USD 150,000 - 190,000; Full time

Job summary

Health and Human Services Commission (HHSC) in Austin, TX seeks a Senior SOC / SIEM Security Analyst with 15+ years of experience. You will own enterprise SOC ops across on-prem, cloud and endpoints, using Microsoft Sentinel, Splunk, and KQL for detection, triage, and incident response.

Requires active certifications and local Texas residency with onsite work only. This role is W2, full-time, and focused on advanced threat hunting and security leadership within HHSC.

Qualifications

• 15+ years of experience in security operations or SOC.
• Must hold at least one active certification from the listing.
• Local Texas resident; Austin onsite only; no relocation.

Responsibilities

• Manage enterprise-wide SOC operations across on-prem, cloud and endpoint.
• Monitor, triage, and respond to incidents using Microsoft Sentinel and SIEM/SOAR tools.
• Tune detection rules and playbooks; support risk assessments; document findings for HHSC leadership.

Skills

KQL

Threat Hunting

SIEM

Automation

Tools

Microsoft Sentinel

Splunk

KQL

Job description

Role: Senior SOC / SIEM Security Analyst – Microsoft Sentinel, Splunk, KQL & Threat Hunting

Client: Health and Human Services Commission (HHSC)

Location: Austin, TX — ONSITE ONLY, NO REMOTE

LOCAL CANDIDATES ONLY — must currently reside in Texas. Candidates out of state and "planning to relocate" will NOT be considered.

Interview: Video Interview

Employment Type: W2 Only

Experience: 15+ Years Overall

Certifications (must hold at least ONE active):

Microsoft Security Operations Analyst Associate / Cybersecurity Architect Expert / Azure Security Engineer Associate / M365 Defender-related, OR CompTIA Security+/CySA+/GIAC, OR CISSP, CISM, CISA, OR Splunk Core Certified Power User / Splunk ES Certified Admin, OR SentinelOne certification

What you'll own:

Enterprise-wide SOC operations across on-prem, cloud, and endpoint — monitoring, triage, and incident response using Microsoft Sentinel (KQL, analytics rules, automation), SIEM/SOAR/EDR/XDR/NDR platforms, and threat hunting. You'll tune detection rules and playbooks, support vulnerability/risk assessments, and document findings for HHSC security leadership.

Quick qualifying check before you reach out:

• Do you currently reside in Texas (not planning to relocate)?
• Do you hold at least one of the active certifications listed above?

#W2Only #Hotlist #SOC #SIEM #CyberSecurity #MicrosoftSentinel #Splunk #KQL #ThreatHunting #AustinTX #InfoSec #ITStaffing