Network Security Analyst (Cybersecurity)

Location: Onsite in Austin, Texas; no remote work. Candidates must already reside in Texas.

Company

hirify.global is a Texas-based IT staffing and IT delivery firm serving Texas state and local government agencies since 2002.

What you will do

• Monitor, analyze, triage, and prioritize alerts from SIEM, EDR/XDR, cloud security, email security, identity protection, and network security platforms.
• Investigate suspicious activity, phishing, malware, indicators of compromise, anomalous behavior, and potential cybersecurity incidents.
• Correlate data from endpoints, firewalls, IDS/IPS, cloud services, authentication systems, and threat intelligence feeds.
• Escalate confirmed threats and coordinate containment, eradication, recovery, incident response, and after-action activities.
• Document investigations, response actions, metrics, and leadership-ready summaries in ticketing and case management systems.
• Improve detection capabilities through alert tuning, threat intelligence integration, vulnerability assessment, procedure development, and emerging-threat research.

Requirements

• At least five years of experience in cybersecurity operations, security monitoring, incident response, threat detection, security investigations, or related cybersecurity disciplines.
• Experience triaging security alerts, analyzing security events, and documenting incident investigations.
• Experience with cybersecurity frameworks, incident response processes, and threat detection methodologies.
• Experience with one or more SIEM platforms, including NetWitness, Microsoft Sentinel, Splunk, QRadar, ArcSight, or LogRhythm.
• Experience with Microsoft Security, EDR, IDS/IPS, threat intelligence, vulnerability management, email security, cloud security monitoring, or SASE technologies.
• Knowledge of SOC operations, security monitoring, incident triage, investigation, escalation, common cyber threats, malware, phishing, insider threats, APT techniques, IOCs, IOAs, and MITRE ATT&CK.
• Knowledge of Windows, Linux, networking protocols, Active Directory, Microsoft Entra ID, cloud environments, and enterprise security controls.
• Experience with query languages such as KQL, Lucene, SPL, or ESQL and scripting languages such as PowerShell, Python, or Bash.
• Ability to make risk-based decisions, follow incident-response procedures, communicate with technical and non-technical stakeholders, and work independently within a 24x7 cybersecurity operations team.

Nice to have

• Four-year degree in cybersecurity, information security, computer science, computer information systems, management information systems, or a related field; relevant education and experience may substitute for one another.
• CompTIA Security+, GCIH, GCIA, Certified SOC Analyst, Microsoft Cybersecurity Analyst SC-200, or other GIAC or SOC-related certifications.

Culture & Benefits

• One-year position supporting a government client in Austin.
• Competitive compensation and benefits with support for professional growth, career success, and well-being.
• Work involves systems handling sensitive information and compliance with HHSC policies and applicable state and federal security requirements.
• After-hours support may be required during high-priority security incidents, subject to SOC Manager approval.
• Employment eligibility is subject to a pre-employment security review.