Network Security Analyst 2

About the role

Onsite in North Austin, TX – 10‑month contract.

The Network Security Analyst II performs advanced cybersecurity and network security analysis work in support of the client’s enterprise security operations. This role monitors, detects, investigates, and responds to security events across on‑premises, cloud, and endpoint environments. The ideal candidate is a hands‑on security operations professional with strong experience across SIEM, SOAR, EDR, network detection, and incident response platforms.

Responsibilities

• Monitor security alerts, logs, network events, endpoint telemetry, and threat intelligence feeds.
• Analyze suspicious activity, anomalous network behavior, malware indicators, endpoint detections, and SIEM correlation events to determine scope, impact, and required response actions.
• Perform incident triage, investigation, escalation, containment coordination, and documentation in alignment with security operations procedures.
• Develop, tune, and maintain detection rules, dashboards, alerts, playbooks, and queries to improve visibility across network, endpoint, identity, and cloud environments.
• Support threat‑hunting activities using KQL, SPL, packet/session analysis, endpoint telemetry, and other investigative techniques.
• Assist with vulnerability, risk, and control assessments for network security infrastructure and enterprise information systems.
• Document findings, prepare incident reports, track corrective actions, and communicate technical information to security leadership and business stakeholders.
• Collaborate with network, infrastructure, cloud, endpoint, and application teams to validate security events and implement risk‑mitigation measures.
• Maintain awareness of emerging cyber threats, attack techniques, indicators of compromise, and security best practices relevant to healthcare and public‑sector environments.
• Support compliance, audit, and reporting activities by providing evidence, metrics, and security‑operations documentation as requested.

Requirements

• Minimum of seven years of experience in cybersecurity, network security, security operations, incident response, or a closely related information‑security role.
• Hands‑on experience with Microsoft Sentinel, including incident management, analytics rules, workbooks, automation, data connectors, and Kusto Query Language.
• Experience using SIEM for log analysis, alert investigation, dashboarding, correlation searches, and security monitoring.
• Experience with NDR for network traffic analysis, packet/session investigation, threat detection, and incident support.
• Experience with EDR tools, including endpoint alert triage, device investigation, advanced hunting, and response actions.
• Working knowledge of network security concepts such as firewalls, IDS/IPS, proxy logs, DNS, VPN, TCP/IP, segmentation, and secure network architecture.
• Ability to analyze complex security events, correlate data across multiple sources, and produce clear written documentation and recommendations.
• Knowledge of security frameworks, standards, and regulatory considerations such as NIST, CIS Controls, HIPAA, and state information‑security requirements.
• Strong communication, collaboration, problem‑solving, and analytical skills.

Benefits

• Medical, dental, vision, life, disability, and other insurance plans.
• Employee Stock Purchase Program (ESPP) and 401(k) with company match after 12 months of tenure.
• Health Savings Account (HSA) on the HDHP plan.
• SupportLinc Employee Assistance Program (EAP) with up to eight free counseling sessions.
• Corporate discount savings program and additional discounts.
• Professional development resources: on‑demand training, certification‑prep, a library of technical and leadership courses/books/seminars (available after six months), and certification discounts for associations such as CompTIA and IIBA.
• Dedicated customer‑service team for consultants and a certified Career Coach.
• Access to a comprehensive “Welcome Packet” detailing all benefits, programs, support teams, and resources.