Security Operations Analysts - W2 ONLY

We are seeking 4-Security Operations Analysts for W2 positions working on-site in Austin, Texas monitoring, investigating, and responding to security events across their network, endpoint, identity, and cloud environments. It is for integrating applications from two different divisions into Google SecOps (SIEM/SOAR)

Key Responsibilities

•           Monitor alerts, logs, network events, endpoint telemetry, and threat intelligence feeds

•           Triage and investigate suspicious activity; determine scope and impact and lead escalation and containment coordination

•           Build and tune detection rules, dashboards, alerts, playbooks, and automation workflows

•           Conduct threat hunting using KQL, SPL, packet/session analysis, and endpoint telemetry

•           Support vulnerability, risk, and control assessments

•           Write incident reports, track corrective actions, and brief security leadership and business stakeholders

•           Work with network, infrastructure, cloud, and application teams to validate events and reduce risk

•           Provide evidence and metrics for compliance and audit requests

•           Be available occasionally outside business hours for high-priority incidents or planned maintenance

Requirements

•           2+ years in cybersecurity, network security, security operations, or incident response

•           Hands-on Microsoft Sentinel experience (incident management, analytics rules, workbooks, automation, data connectors, KQL)

•           SIEM experience: log analysis, alert investigation, correlation searches, dashboarding

•           Experience with NDR (network traffic and packet/session analysis) and EDR (alert triage, device investigation, advanced hunting, response actions)

•           Solid understanding of firewalls, IDS/IPS, proxy logs, DNS, VPN, TCP/IP, and network segmentation

•           Familiarity with NIST, CIS Controls, HIPAA, and state information security requirements

•           Strong analytical, written, and verbal communication skills, with the ability to explain risk to technical and non-technical audiences

•           Google SecOps or Wiz experience

Preferred

•           Bachelor's degree in cybersecurity, computer science, IT, or a related field (relevant experience may substitute)

•           Google SecOps or Wiz certification

•           Microsoft certifications (e.g., SC-200, AZ-500, SC-100)

•           Other certifications: Security+, CySA+, GIAC, CISSP, CISM, CISA, Splunk Core Certified Power User or ES Admin, SentinelOne

•           Splunk (SPL) experience

•           Experience mentoring junior analysts

•           Healthcare or public-sector background