Network Security Analyst 1

Job Summary

The Network Security Analyst I performs advanced cybersecurity analysis and threat triage activities within the Cybersecurity Operations Center (CSOC). Work involves continuously monitoring, triaging, analyzing, and prioritizing cybersecurity alerts; investigating suspicious activity; identifying potential threats; and coordinating incident response activities to protect agency information systems, networks, and data. Serves as a primary point of contact for security event analysis, threat identification, and incident escalation.

Responsibilities

• Monitors, analyzes, and triages cybersecurity alerts generated by Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), cloud security, email security, identity protection, and network security platforms.
• Conducts initial investigations of detected and reported security events to determine severity, scope, impact, and potential risk to agency operations.
• Identifies, validates, and prioritizes potential cybersecurity incidents, escalating confirmed threats to Incident Response, Threat Hunting, or SOC Engineering teams according to established procedures.
• Correlates security events from multiple data sources, including endpoints (EDR), firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), cloud services, authentication systems, and threat intelligence feeds.
• Reviews and analyzes indicators of compromise (IOCs), suspicious network activity, phishing emails, malware detections, and anomalous user behavior.
• Documents investigations, findings, and response actions in ticketing and case management systems to ensure accurate tracking and reporting.
• Assists with incident containment, eradication, and recovery efforts by coordinating with technical teams and stakeholders.
• Reports and escalates to the CSOC Team Lead and/or SOC Manager.
• Supports continuous improvement of threat detection capabilities through alert tuning, process refinement, threat intelligence integration, and identification of false‑positive trends.
• Performs vulnerability assessment reviews and evaluates identified vulnerabilities for potential risk and remediation prioritization.
• Supports development and maintenance of operational procedures, playbooks, workflows, and knowledge‑base articles related to threat detection and incident response.
• Researches emerging cyber threats, attack techniques, tactics, and procedures (TTPs) to improve detection and response effectiveness.

Benefits

• Medical, dental, vision, life, disability, and other insurance plans.
• Employee Stock Purchase Program (ESPP).
• 401(k) program with company match after 12 months of tenure.
• Health Savings Account (HSA) on the HDHP plan.
• SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
• Corporate discount savings program and additional discounts.
• On‑demand training program, certification preparation, and a library of technical and leadership courses, books, and seminars (available after 6 + months of tenure).
• Certification discounts and perks for professional associations such as CompTIA and IIBA.
• Dedicated customer‑service team for consultants and a certified Career Coach.

About Everforth Apex

Everforth Apex is a world‑class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. The company offers quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Its commitment to excellence is reflected in awards such as ClearlyRated’s Best of Staffing® in Talent Satisfaction (U.S.) and Great Place to Work® (U.K. and Mexico).

Location & Contract

Onsite in North Austin, TX. 10‑month contract.