Network Security Analyst 3 (Local to Austin, TX )

We are seeking a senior-level Security Operations Analyst to strengthen detection, incident response, threat hunting, and security orchestration capabilities across an enterprise security operations environment.

The ideal candidate will have strong hands-on SOC and Tier 3 investigation experience, along with expertise in CrowdStrike Falcon, Torq SOAR, security automation, detection engineering, and AI-assisted security operations. Experience using generative AI/LLM tools such as Claude to accelerate security triage, playbook development, and analyst workflows is highly desirable.

The role operates within a strict Zero Trust and defense-in-depth security model and requires strong knowledge of enterprise security operations, incident response, detection analytics, and security automation.

Key Responsibilities:

• Serve as a SOC analysis & Tier 3 escalation point for complex security incidents, performing deep-dive investigation, root cause analysis, and threat hunting across endpoint, network, cloud, and identity telemetry.
• Design, build, and maintain detection analytics, dashboards, and hunting queries (Falcon Query Language / FQL) within CrowdStrike Falcon, tuning correlation rules and detection logic to reduce false positives and improve mean-time-to-detect (MTTD).
• Architect and maintain security orchestration, automation, and response (SOAR) playbooks in Torq, integrating CrowdStrike Falcon, identity providers, ticketing, and communication platforms into automated response workflows.
• Design AI-assisted analyst workflows (e.g., automated triage summarization, alert enrichment, playbook drafting) using approved generative AI tooling, ensuring all inputs are sanitized and free of regulated or case-specific data.
• Lead incident response efforts for high-severity events, coordinating with IT, legal, and divisional stakeholders while strictly adhering to FTI/CJI handling restrictions.
• Develop and maintain detection engineering documentation, runbooks, and standard operating procedures (SOPs) for Tier 1/Tier 2 analyst use.
• Mentor and provide technical guidance to Tier 1 and Tier 2 SOC analysts; review and validate their investigative work and escalation quality.
• Continuously evaluate and integrate emerging SOC automation and AI capabilities, presenting proposals for tooling changes with documented risk and compliance analysis.
• Participate in an on-call rotation for critical incident escalations.

The above job description and requirements are general in nature and may be subject to change based on the specific needs and requirements of the organization and project.

CANDIDATE SKILLS AND QUALIFICATIONS

• Minimum Requirements:
• Candidates that do not meet or exceed the minimum stated requirements (skills/experience) will be displayed to customers but may not be chosen for this opportunity.