Security Analyst I

Kforce has a client that is seeking a Security Analyst I in Houston, TX. Summary: The Tier 1 Cyber Security Analyst serves as the first line of defense within a 24/7 Security Operations Center (SOC), monitoring, investigating, and escalating security events. This role leverages SIEM and SOAR platforms to identify potential threats, conduct initial alert triage, and support incident response efforts. Responsibilities:

• Monitor and investigate security alerts from SIEM tools, including Splunk
• Perform initial triage to determine severity, impact, and validity of alerts
• Analyze logs, network traffic, endpoint activity, and email security events
• Enrich alerts with threat intelligence and contextual data
• Escalate incidents to Tier 2/3 teams following established procedures
• Document findings, actions taken, and incident details in case management systems
• Execute basic response and automation activities using Splunk SOAR
• Support 24/7 SOC operations, including shift coverage and handoffs
• Assist with detection tuning, reducing false positives, and continuous process improvement
• Stay current on cybersecurity threats, vulnerabilities, and attack trends
• Associate degree in Cybersecurity, IT, or related field; equivalent experience considered
• CompTIA Security+ certification required
• 2+ years of SOC or cybersecurity operations experience preferred
• Experience with Splunk, Splunk SOAR, and Proofpoint
• Knowledge of incident triage, escalation processes, networking fundamentals, and log analysis
• Familiarity with Microsoft security technologies and Azure environments

• CompTIA CySA+
• Splunk Core Certified User
• Microsoft Security certifications (SC-200, AZ-500)