Network Security Analyst 1

For more details, please connect with Priyam Nagwani at View phone number on click.appcast.io or email at View email address on click.appcast.io

End Client: Texas Health and Human Services Commission

Job Title: Network Security Analyst 1

Duration: 10 Months
Start Date: ASAP
Position Type: Contract
Number of Hours: 40 Hours a Week
Location: 701 W 51st Street, Austin, TX 78751

Interview Type: Webcam
Ceipal ID: STX_SIEM769_PN
Position ID: 529701769


Description: A network security analyst ensures that information systems and computer networks are secure. This includes protecting the company against hackers and cyber-attacks, as well as monitoring network traffic and server logs for activity that seems unusual. Additionally, these analysts are responsible for finding vulnerabilities in the computer networks and creating recommendations for how to minimize these vulnerabilities. The network security analyst investigates security breaches, develops strategies for any security issues that arise, and utilizes the help of firewalls and antivirus software to maintain security.

Responsibilities:

• Monitors, analyzes, and triages cybersecurity alerts generated by Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), cloud security, email security, identity protection, and network security platforms.
• Conducts initial investigations of detected and reported security events to determine severity, scope, impact, and potential risk to agency operations.
• Identifies, validates, and prioritizes potential cybersecurity incidents, escalating confirmed threats to Incident Response, Threat Hunting, or SOC Engineering teams according to established procedures.
• Correlates security events from multiple data sources, including endpoints (EDR), firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), cloud services, authentication systems, and threat intelligence feeds.
• Reviews and analyzes indicators of compromise (IOCs), suspicious network activity, phishing emails, malware detections, and anomalous user behavior.
• Documents investigations, findings, and response actions in ticketing and case management systems to ensure accurate tracking and reporting.
• Assists with incident containment, eradication, and recovery efforts by coordinating with technical teams and stakeholders.
• Reports and escalates to the CSOC Team Lead and/or SOC Manager.
• Supports the continuous improvement of threat detection capabilities through alert tuning, process refinement, threat intelligence integration, and identification of false-positive trends.
• Performs vulnerability assessment reviews and evaluates identified vulnerabilities for potential risk and remediation prioritization.
• Supports development and maintenance of operational procedures, playbooks, workflows, and knowledge base articles related to threat detection and incident response.
• Researches emerging cyber threats, attack techniques, tactics, and procedures (TTPs) to improve detection and response effectiveness.

Required Skills:

• Experience triaging security alerts required 3 years
• Experience analyzing security events required 3 years
• Experience documenting incident investigations required 3 years
• Experience with cybersecurity frameworks required 3 years
• Experience with incident response processes required 3 years
• Experience with threat detection methodologies required 3 years
• Experience in cybersecurity operations required 3 years
• Experience in security monitoring required 3 years
• Experience in incident response required 3 years
• Experience in threat detection required 3 years
• Experience in security investigations required 3 years
• Experience in related cybersecurity disciplines required 3 years
• Please See Job Description Section for m