Network Security Analyst II

Location: Hybrid - Austin, TX 78751 | Duration: 11 Months

About the role

Perform advanced cybersecurity and network security analysis to support enterprise security operations. Monitor, detect, investigate, and respond to security events across on-premises, cloud, and endpoint environments. Analyze suspicious activity, anomalous network behavior, malware indicators, and SIEM alerts to determine impact and response. Conduct incident triage, investigation, escalation, containment, coordination, and documentation per security procedures. Develop, tune, and maintain detection rules, dashboards, alerts, playbooks, and queries for improved security visibility. Support threat hunting activities using KQL, SPL, packet/session analysis, endpoint telemetry, and investigative techniques. Assist with vulnerability, risk, and control assessments for network security infrastructure and information systems. Document findings, prepare incident reports, track corrective actions, and communicate with security leadership and stakeholders. Collaborate with network, infrastructure, cloud, endpoint, and application teams on event validation and risk mitigation. Stay up to date with emerging cyber threats, attack techniques, indicators of compromise, and security best practices. Support compliance, audit, and reporting by providing evidence, metrics, and documentation as needed. Participate in incident response, escalation, and after-action reviews. Maintain accurate operational documentation, investigation notes, metrics, and summaries for leadership. May provide support outside normal business hours during high-priority incidents or scheduled maintenance.

Requirements

• Minimum 7 years of experience in cybersecurity, network security, security operations, or incident response.
• Hands-on experience with Microsoft Sentinel (incident management, analytics rules, workbooks, automation, KQL).
• Experience with SIEM, NDR, EDR tools, and detection engineering.
• Strong knowledge of network security concepts (firewalls, IDS/IPS, proxy logs, DNS, VPN, TCP/IP, segmentation).
• Ability to analyze complex security events, correlate data, and produce clear documentation.
• Familiarity with security frameworks/standards (NIST, CIS Controls, HIPAA, state security requirements).
• Excellent communication, collaboration, problem-solving, and analytical skills.

Qualifications

• Preferred Bachelor's degree in cybersecurity, computer science, IT, or relevant field (or equivalent experience).
• Microsoft and other industry security certifications (e.g., Security+, CISSP, CISA, Splunk, SentinelOne).

Skills

• Microsoft Sentinel (KQL, analytics rules, workbooks, automation)
• SIEM, SOAR, EDR, XDR, NDR, security log management
• Threat hunting using KQL, SPL, packet/session analysis, endpoint telemetry
• Network security concepts (firewalls, IDS/IPS, proxy logs, DNS, VPN, TCP/IP, segmentation)
• Vulnerability, risk, and control assessments
• Incident triage, investigation, escalation, containment, coordination, documentation
• Detection rule development, tuning, dashboard and alert creation
• Knowledge of security frameworks (NIST, CIS Controls, HIPAA)
• Strong communication, collaboration, problem‑solving, analytical abilities