Cybersecurity Analyst/SOC Analyst

Title: Cybersecurity Analyst

Location: Little Rock, AR 

Shift 1 (Day): 6:00 AM to 6:00 PM (12 hrs on Sunday, Monday, Tuesday,   and 12 hrs every alternate Saturday)
Shift 2 (Day): 6:00 AM to 6:00 PM (12 hrs on Wednesday, Thursday, Friday,   and 12 hrs every alternate Saturday)
Onsite: Day Shift resources need to go onsite 2 days a week 

ComTec is seeking a Cybersecurity Analyst to support security monitoring, alert triage, and incident escalation across cyber and physical-security environments. The role involves reviewing cybersecurity alerts and logs from network and application systems, as well as physical-security systems, to help identify and respond to potential incidents.

Key Responsibilities:

• Monitor and triage alerts from SIEM, network, OT, application, and physical security systems, and investigate potential malware, phishing, unauthorized access, and suspicious activity.
• Analyze logs and alert data to determine an incident’s cause, scope, severity, and impact.
• Correlate cyber and physical security events, document findings, and escalate incidents to the appropriate teams in accordance with established procedures.
• Support threat-hunting activities by reviewing alerts and logs, gathering threat intelligence, and using vulnerability findings to help prioritize investigations.
• Use the MITRE ATT&CK framework to analyze alerts and threat activity.
• Follow monitoring procedures and response playbooks, escalate incidents as required, and communicate investigation findings.
• Participate in attack simulations and tabletop exercises to support SOC readiness.
• Prepare incident reports and post-incident documentation and contribute to lessons-learned reviews.
• Stay informed about emerging threats and the use of AI tools in cybersecurity.
• Participate in an on-call rotation approximately once every 4–6 weeks.
• Be willing to travel up to 25% for training and incident support.

Required Skills:

• 5+ years of relevant cybersecurity or security operations experience, including security monitoring, alert triage, and incident response.
• Experience analyzing security alerts and logs, conducting investigations, and escalating complex or high-impact incidents.
• Hands-on experience with security monitoring platforms such as Splunk and CrowdStrike.
• Hands-on experience with email security tools and phishing detection.
• Experience with SIEM, SOAR, IDS/IPS, and digital forensics tools.
• Ability to analyze and validate data in support of security operations.
• Applied knowledge of adversary tactics and techniques, including the MITRE ATT&CK framework, to investigate and assess threats.
• Familiarity with physical security systems and foundational knowledge of OT/ICS, application, cloud, and network security.
• Knowledge of regulatory compliance like NERC CIP and/or the NIST Cybersecurity Framework, with experience supporting audits or assessments.
• Experience applying AI or agentic AI tools in SOC operations is a plus.
• Collaborative team player with strong analytical and communication skills.
• Self-motivated, resourceful, and customer-focused, with a strong sense of ownership.
• Certifications such as CompTIA, GIAC, or ISC2 are a plus.