SOC Network Security Analyst – 24/7 Threat Defense (Austin)

KPG99 INC; Austin (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

KPG99 INC is seeking a Network Security Analyst to perform advanced cybersecurity analysis and threat triage within its Cybersecurity Operations Center (CSOC). You will monitor, triage, analyze, and prioritize alerts, collaborate with Incident Response, Threat Hunting, or SOC Engineering teams, and act as the primary contact for security event analysis.

The role requires the ability to work in a 24x7 environment and may include after-hours support during high-priority incidents.

Qualifications

• Bachelor's degree or equivalent experience in cybersecurity preferred.
• Experience triaging security alerts and analyzing events.
• Familiarity with SIEM, EDR/XDR, and threat intelligence feeds.

Responsibilities

• Monitor, triage, analyze, and prioritize cybersecurity alerts; investigate suspicious activity; coordinate incident response activities to protect agency systems, networks, and data.
• Serve as a primary point of contact for security event analysis, threat identification, and incident escalation.
• Correlate events across endpoints, firewalls, IDS/IPS, cloud services, authentication systems, and threat intel feeds to identify indicators of compromise and anomalous user behavior.
• Work independently and as part of a 24x7 CSOC operations team; may support outside normal hours during high-priority security incidents.

Skills

Alert triage

Security events analysis

Cybersecurity frameworks

Incident response processes

Threat detection methods

Cybersecurity operations

Security monitoring

Incident response

Threat detection

Security investigations

Related cybersecurity disciplines

5+ years preferred

Education

Four-year degree in cybersecurity or related field

Job description

KPG99 INC is seeking a Network Security Analyst to perform advanced cybersecurity analysis and threat triage within its Cybersecurity Operations Center (CSOC). You will monitor, triage, analyze, and prioritize alerts, collaborate with Incident Response, Threat Hunting, or SOC Engineering teams, and act as the primary contact for security event analysis.

The role requires the ability to work in a 24x7 environment and may include after-hours support during high-priority incidents.