Tier 1 Cyber Security Analyst

Insight Global; Houston (TX); On-site; USD 41,000 - 55,000; Full time

Job summary

Insight Global in Houston is seeking a Tier 1 Cyber Security Analyst to monitor and triage security events in a 24/7 SOC, using SIEM and SOAR tools.

The role requires initial alert investigation, escalation, and collaboration with Tier 2/3 analysts, with on-site work in Downtown Houston.

Strong knowledge of Splunk, Proofpoint, and Microsoft/Azure security tools, plus CompTIA Security+ certification.

Qualifications

• Associate degree in Cybersecurity, IT, or related field OR equivalent SOC experience.
• CompTIA Security+ Certification Required.
• Experience with Splunk, Splunk SOAR, Proofpoint.
• Experience triaging alerts and escalation processes.
• Knowledge of networking fundamentals and log analysis.
• Familiarity with Microsoft and Azure platforms.

Responsibilities

• Monitor security events and alerts from SIEM platforms (e.g., Splunk) and other security tools.
• Perform initial triage and investigation of alerts to determine severity, scope, and potential impact.
• Analyze logs, network activity, endpoint data, and email security alerts (e.g., Proofpoint).
• Enrich alerts with contextual data (threat intelligence, asset data, user behavior).
• Follow defined escalation paths to Tier 2/3 analysts based on severity, confidence, and impact.
• Document incidents, findings, and actions taken in case management systems.
• Execute basic response actions using SOAR platforms (e.g., Splunk SOAR).
• Assist in containment actions under guidance.
• Support 24/7 SOC operations, including shift work.

Skills

SOC monitoring

Incident response

Log analysis

SIEM familiarity

Cloud security (Azure)

Microsoft security tools

Proofpoint

Escalation procedures

Anomaly detection

Team collaboration

Education

Associate degree in Cybersecurity or related field

Tools

Splunk

Splunk SOAR

Proofpoint

Microsoft security tools

Azure security tools

Job description

Job Description: Tier 1 Cyber Security Analyst (SOC)

24/7 SOC environment including nights, weekends, and holidays

On-call or extended hours during incidents

MUST go onsite in Downtown Houston

hourly rate is based on experience

Position Summary

The Tier 1 Cyber Security Analyst is responsible for the initial monitoring, detection, triage, and escalation of security events within a 24/7 Security Operations Center (SOC). This role serves as the frontline of cyber defense, leveraging SIEM and SOAR platforms to identify potential threats, investigate alerts, and ensure timely escalation according to established incident response procedures. This position requires a highly motivated, curious, and analytically driven individual who can think critically, adapt quickly, and operate effectively in a fast-paced environment.

Key Responsibilities

Monitoring & Alert Triage:

• Monitor security events and alerts from SIEM platforms (e.g., Splunk) and other security tools.
• Perform initial triage and investigation of alerts to determine severity, scope, and potential impact.
• Analyze logs, network activity, endpoint data, and email security alerts (e.g., Proofpoint).
• Enrich alerts with contextual data (threat intelligence, asset data, user behavior).
• Follow defined escalation paths to Tier 2/3 analysts based on severity, confidence, and impact.
• Document incidents, findings, and actions taken in case management systems.
• Execute basic response actions using SOAR platforms (e.g., Splunk SOAR).
• Assist in containment actions under guidance.

SOC Operations:

• Support 24/7 SOC operations, including shift work.
• Participate in shift handoffs.
• Maintain situational awareness of threats.

Platform & Tool Usage:

• Use Splunk SOAR for automation.
• Investigate email threats using Proofpoint.
• Work with Microsoft and Azure security tools.
• Improve alert fidelity and reduce false positives.
• Stay current on emerging threats.

Required Qualifications

• Minimum 2 years of experience in 24/7 SOC environment preferred
• Associate degree in Cybersecurity, IT, or related field OR equivalent SOC experience.
• CompTIA Security+ Certification Required
• Experience with Splunk, Splunk SOAR, Proofpoint
• Experience triaging alerts and escalation processes
• Knowledge of networking fundamentals and log analysis
• Familiarity with Microsoft and Azure platforms

Preferred Certifications

• CompTIA CySA+ (preferred)
• Splunk Core Certified User
• Microsoft Security certifications (e.g., SC-200, AZ-500)