SOC / SIEM Security Analyst

Job Title: Senior SOC / SIEM Security Analyst



Location: Austin, TX



Work Arrangement: 100% Onsite



Experience: 15+ Years Overall



Visa: All Visa



Interview: Video Interview



Candidate Requirement: Local Texas candidates only. Candidates must currently reside in Texas. No relocation candidates. Job Description

We are seeking a highly experienced Senior SOC / SIEM Security Analyst / Senior Security Operations Analyst / Cybersecurity Analyst to support enterprise security operations.

The ideal candidate will have strong hands-on experience with Microsoft Sentinel, Splunk, KQL, SPL, SIEM, SOAR, EDR, XDR, NDR, threat hunting, detection engineering, and incident response .

Key Responsibilities

• Monitor security alerts, logs, network events, endpoint telemetry, and threat intelligence feeds.

• Investigate suspicious activity, anomalous network behavior, malware indicators, endpoint detections, and SIEM correlation events.

• Perform incident triage, investigation, escalation, containment coordination, and documentation.

• Develop, tune, and maintain SIEM detection rules, dashboards, alerts, playbooks, and queries.

• Perform threat hunting using KQL, SPL, packet/session analysis, endpoint telemetry , and other investigative techniques.

• Analyze and correlate security events across network, endpoint, identity, and cloud environments.

• Support vulnerability, risk, control, compliance, and security assessments.

• Prepare incident reports, document findings, track corrective actions, and communicate security risks to leadership.

• Collaborate with network, infrastructure, cloud, endpoint, and application teams to validate security events and mitigate risks.

• Support security monitoring for systems handling sensitive information.

• Participate in incident response, escalation, and after-action review activities.

Required Technical Skills

• Microsoft Sentinel

• KQL (Kusto Query Language)

• SIEM

• Splunk / SPL

• SOAR

• EDR / XDR

• NDR

• Threat Hunting

• Detection Engineering

• Incident Response

• Security Log Collection & Management

• Threat Intelligence

• Security Alert Investigation & Correlation

• Firewalls, IDS/IPS, DNS, VPN, TCP/IP, and network segmentation

• Security monitoring and SIEM platform/architecture support

• Detection rule development and tuning

Security & Compliance Knowledge

• NIST

• CIS Controls

• HIPAA

• State information security requirements

• Indicators of Compromise (IOCs)

• Threat tactics, techniques, and procedures

• Security risk and control assessments

Required Certification

At least one active security certification is required.

Preferred certifications include:

• Microsoft Certified: Security Operations Analyst Associate

• Microsoft Certified: Cybersecurity Architect Expert

• Microsoft Certified: Azure Security Engineer Associate

• Microsoft 365 Defender-related certifications

• CompTIA Security+

• CompTIA CySA+

• CISSP

• CISM

• CISA

• GIAC certifications

• Splunk Core Certified Power User

• Splunk Enterprise Security Certified Admin

• SentinelOne certifications

Education & Experience

• Minimum 15+ years of overall professional experience preferred for this position .

• Strong experience in cybersecurity, SOC, security operations, network security, incident response, or related information security functions.

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Technology, or a related field preferred.

• Strong analytical, problem-solving, communication, and documentation skills.

Important: This is a 100% onsite position in Austin, TX . Only candidates who currently reside in Texas should be submitted. Candidates planning to relocate to Texas will not be considered.

To apply: Please send your updated resume to View email address on us.fitly.work