SOC Analyst I – 24/7 Ops (Splunk/SOAR)

Aquent; Houston (TX); On-site; USD 70,000 - 100,000; Full time

Job summary

Aquent is partnering with a leading organization to recruit a cybersecurity professional for a 24/7 Security Operations Center role in Houston, TX. The position focuses on detection, analysis, and response to security incidents in a fast-paced environment.

You will monitor security events, perform triage, and coordinate with senior analysts while leveraging Splunk, Splunk SOAR, and Proofpoint to protect critical assets and ensure operational continuity.

Qualifications

• Minimum 2 years in a 24/7 SOC environment preferred.
• Associate degree in Cybersecurity or IT, or equivalent practical experience.
• CompTIA Security+ Certification required.
• Experience with Splunk, Splunk SOAR, and Proofpoint.
• Foundational knowledge of networking and log analysis.
• Ability to document incidents clearly and communicate effectively.

Responsibilities

• Monitor and analyze security events from SIEM platforms like Splunk.
• Perform initial triage to determine severity, scope, and impact.
• Analyze logs, network activity, endpoint data, and email alerts.
• Enrich alerts with threat intel and asset data for decision making.
• Escalate to Tier 2/3 per defined procedures.
• Document all incidents and actions in case management systems.
• Execute basic response actions and automated playbooks with SOAR.
• Support containment actions under guidance of senior analysts.
• Contribute to 24/7 SOC operations and shift handoffs.
• Stay current on threats and tune detection rules.

Skills

SOC experience

Networking fundamentals

Log analysis

Splunk & Splunk SOAR

Proofpoint

Azure Security

Analytical thinking

Communication skills

Education

Associate degree in Cybersecurity or IT

Tools

Splunk

Splunk SOAR

Proofpoint

Azure Security

Job description

Aquent is partnering with a leading organization to recruit a cybersecurity professional for a 24/7 Security Operations Center role in Houston, TX. The position focuses on detection, analysis, and response to security incidents in a fast-paced environment.

You will monitor security events, perform triage, and coordinate with senior analysts while leveraging Splunk, Splunk SOAR, and Proofpoint to protect critical assets and ensure operational continuity.