Network Security Analyst 1

Education and Experience » Graduation from an accredited four-year college or university with major coursework in cybersecurity, information security, computer science, computer information systems, management information systems, or a related field is preferred. Minimum of five (5) years of experience in cybersecurity operations, security monitoring, incident response, threat detection, security investigations, or related cybersecurity disciplines.

Network Security Analyst 1 (Onsite)
Primary Location: Austin, Texas
 
V-Soft Consulting is currently hiring for a Network Security Analyst 1 for our premier client in Austin, Texas.
 
WHAT YOU’LL NEED:
Technical Requirements and Certifications »
One or more of the following certifications are preferred:

• CompTIA Security+
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Intrusion Analyst (GCIA)
• Certified SOC Analyst (CSA)
• Microsoft Cybersecurity Analyst (SC-200)
• Other GIAC or SOC-related certifications

 
Education and Experience »

• Graduation from an accredited four-year college or university with major coursework in cybersecurity, information security, computer science, computer information systems, management information systems, or a related field is preferred. Relevant education and experience may be substituted for one another.
• Minimum of five (5) years of experience in cybersecurity operations, security monitoring, incident response, threat detection, security investigations, or related cybersecurity disciplines.

Experience working with one or more of the following technologies:

• SIEM platforms (NetWitness, Microsoft Sentinel, Splunk, QRadar, ArcSight, LogRhythm, etc.).
• Microsoft Security (Microsoft 365 Defender XDR, Microsoft Sentinel).
• Endpoint Detection and Response (Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, etc.)
• IDS/IPS technologies (Trellix/FireEye, Corelight)
• Threat intelligence platforms (VirusTotal, Google Threat Intelligence, Cisco Talos, Recorded Future, MISP).
• Vulnerability management tools (Tenable, Qualys, Rapid7).
• Email security platforms (IronPort ESA, Abnormal.ai, Proofpoint).
• Cloud security monitoring solutions (Google Wiz, MDCA, Cortex Cloud, Sysdig).
• Secure Access Service Edge (Zscaler, Prisma, Netskope).
• Experience triaging security alerts, analyzing security events, and documenting incident investigations.
• Experience with cybersecurity frameworks, incident response processes, and threat detection methodologies.

 
Knowledge, Skills and Abilities »
Knowledge of:

• Cybersecurity Operations Center (CSOC/SOC) operations and best practices.
• Security incident triage, analysis, investigation, and escalation procedures.
• Security monitoring technologies, including SIEM, EDR/XDR, IDS/IPS, firewalls, endpoint security solutions, and cloud security platforms.
• Common cyber threats, attack vectors, malware, phishing campaigns, insider threats, and advanced persistent threat (APT) techniques.
• Threat intelligence concepts, indicators of compromise (IOCs), indicators of attack (IOAs), and MITRE Telecommunication & CK methodologies.
• Windows, Linux, networking protocols, Active Directory, Microsoft Entra ID, cloud environments, and enterprise security controls.
• Incident response lifecycle and cybersecurity frameworks such as NIST Cybersecurity Framework, NIST Incident Response guidance, and PICERL.

 
Skill in:

• Security event analysis and threat triage.
• Correlating and interpreting data from multiple cybersecurity tools.
• Investigating suspicious activity and identifying indicators of compromise.
• Using SIEM, EDR/XDR, threat intelligence, vulnerability management, and case management platforms.
• Producing clear documentation, incident reports, and technical communications.
• Prioritizing and managing multiple investigations in a fast-paced operational environment for a large organization.
• Knowledge of and experience with query languages such as KQL, Lucene, SPL, ESQL, etc.
• Knowledge of and experience with scripting languages such as PowerShell, Python, Bash, etc.

 
Ability to:

• Analyze complex security events and distinguish legitimate threats from false positives.
• Make risk-based decisions during incident investigations.
• Execute established incident response and escalation procedures.
• Collaborate effectively with security engineers, incident responders, system administrators, CISO leadership, and business stakeholders.
• Communicate technical information clearly to both technical and non-technical audiences.
• Work independently and as part of a 24x7 cybersecurity operations team.

 
Interested?
Qualified candidates should send their resumes to asyed@vsoftconsulting.com
 
V-Soft Consulting Group is recognized among the top 100 fastest growing staffing companies in North America, V-Soft Consulting Group is headquartered in Louisville, KY with strategic locations in India, Canada and the U.S. V-Soft is known as an agile, innovative technology services company holding several awards and distinctions and has a wide variety of partnerships across diverse technology stacks.
 
As a valued V-Soft Consultant, you’re eligible for full benefits (Medical, Dental, Vision), a 401(k) plan, competitive compensation and more. V-Soft is partnered with numerous Fortune 500 companies, exceptionally positioned to advance your career growth.
 
V-Soft Consulting provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
 
For more information or to view all our open jobs, please visit www.vsoftconsulting.com or call (844) 425-8425.