SOC Cyber Security Specialist

ON2IT B.V.; Plano (TX); On-site; USD 70,000 - 120,000; Full time

Job summary

ON2IT B.V. is seeking a Security Operations Center analyst to join our Plano, TX team. You will analyze network activity, determine which threats are real, and configure controls to prevent next attacks.

You will work on-site in Plano, TX as part of our GSOC, using AI-enabled MDR Detect and our internal AI tooling. You will handle hands-on tasks with common network protocols and document your work for seamless handover.

Qualifications

• 2-3 years of experience in a SOC/NOC or similar security-operations role
• Excellent English, spoken and written

Responsibilities

• Analyze anomalies, alerts and threats to decide what is real
• Fix security issues in routing and networks
• Configure security controls following Zero Trust principles
• Work hands-on with protocols (SSH, SSL, HTTPS, SMTP, DHCP)
• Document work to support smooth handovers

Skills

Attention to detail

Communication

English fluency

On-site presence

Tools

Git

Markdown

SSH

Linux

Job description

The role

You analyze what is really happening on a customer’s network, decide what matters, and configure the controls that stop the next attempt. You work on-site in Plano, TX, part of our global Security Operations Center (GSOC) team.

What you will do

• Analyze - anomalies, alerts and threats, and decide what is real
• Fix - security issues in routing and networks
• Configure - security controls along Zero Trust principles
• Work hands-on - with protocols like SSH, SSL, HTTPS, SMTP and DHCP, and whatever else the customer runs
• Document - your work so the colleague taking over hits the ground running

How we work with AI

We invest in AI for two reasons: it keeps us ahead of innovation, and it keeps pace with how fast modern threats change. AI is built into our service, not bolted on. MDR Detect™ runs AI-assisted case handling behind our human-led GSOC, and we build our own AI infrastructure, shaped by the specialists who use it. That could be you. No problem if you are not an expert yet. Curious and honest about the gaps? Essential.

Who you are

• You pull the thread - until you understand it, and you say “I don’t know yet” instead of guessing
• You own it - a customer’s request stays yours until it is solved
• You read the organization - not just the network
• You convince with insight - not volume

Experience

Relevant experience - 2-3 years of experience in a SOC, NOC, or similar security-operations role

Technical foundation

• Networking - routers, switches, firewalls (CCNA level, or heading there)
• Concepts - network segmentation, VPN, NAT, DNS and certificates
• Security thinking - least privilege, defense in depth, and how an attack moves once it is inside
• Systems - Windows, macOS and Linux
• Protocols - the common ones (SSH, SSL, HTTPS, SMTP, DHCP) and the confidence to pick up the rest
• Certifications - a relevant certification (for example CCNA or Security+) or actively working toward one; we sponsor further certification

AI and modern tooling

• You use AI daily - and can explain how, not just that you do
• You get prompting - context and structure, not incantations
• You spot repetition - and package it into something reusable
• You respect confidentiality - customer data does not go just anywhere
• You can use git - clone, branch, commit, open a merge request
• You can write Markdown - our runbooks and AI context live in plain text

The rest

• English - excellent, spoken and written
• On-site - required. This is not a hybrid role, and you live within commuting distance of our Plano, TX office
• Screening - due to the sensitive nature of the job, every hire goes through pre-employment screening

Nice to have

• Product experience - Palo Alto Networks Strata or Cortex, Microsoft Defender, Fortinet FortiGate or similar
• Background - SOC, NOC or managed services experience
• Certifications - Palo Alto Networks Security Operations Professional, Palo Alto Networks Network Security Professional, CompTIA Security+, or Microsoft Security Operations Analyst
• Scripting - Python, Bash or similar