Network Security Analyst / SOC Analyst

Network Security Analyst II

Location: Austin, TX (Onsite)
Client: Texas Health and Human Services Commission (HHSC)
Duration: Long-Term Contract

Total Experience: 15 years

Job Description

Texas Health and Human Services Commission (HHSC) is seeking an experienced Network Security Analyst II to support enterprise cybersecurity operations and safeguard critical systems, applications, and networks. The ideal candidate will possess extensive experience in security operations, incident response, threat hunting, SIEM administration, and network security monitoring across on-premises and cloud environments.

This position is responsible for monitoring security events, investigating incidents, analyzing threats, and implementing detection capabilities to ensure the confidentiality, integrity, and availability of HHSC information assets. The candidate will collaborate with security, infrastructure, cloud, and application teams to identify risks, respond to cyber threats, and strengthen the organization's security posture.

Key Responsibilities

• Monitor and analyze security alerts, events, endpoint telemetry, network traffic, and threat intelligence feeds.
• Investigate security incidents, perform triage, determine impact, and coordinate containment and remediation activities.
• Utilize SIEM, SOAR, EDR, XDR, and NDR platforms to detect and respond to threats.
• Develop, tune, and maintain security detection rules, analytics, alerts, dashboards, and automation workflows.
• Conduct threat hunting activities using KQL, SPL, endpoint telemetry, and network analysis techniques.
• Analyze malicious activity, indicators of compromise (IOCs), and attacker tactics to identify potential risks.
• Support vulnerability assessments, risk reviews, and security control evaluations.
• Perform log analysis, event correlation, and investigative reporting across multiple security tools and data sources.
• Collaborate with network, cloud, infrastructure, and application teams to implement risk mitigation strategies.
• Prepare incident reports, executive summaries, and documentation for compliance, audit, and leadership review.
• Maintain awareness of emerging cybersecurity threats, vulnerabilities, and industry best practices.
• Support security monitoring and incident response activities during critical incidents or maintenance windows as needed.

Required Qualifications

• Minimum 7 years of experience in Cybersecurity, Network Security, Security Operations, Incident Response, or Information Security.
• Hands-on experience with Microsoft Sentinel, including:
• Incident Management
• Analytics Rules
• Data Connectors
• Workbooks
• Automation and Playbooks
• Kusto Query Language (KQL)
• Strong experience with:
• SIEM Platforms
• Security Log Collection and Management
• Threat Intelligence
• Detection Engineering
• Security Monitoring
• Incident Response
• Experience with SIEM architecture, administration, and operational support.
• Proficiency in writing and interpreting:
• KQL (Kusto Query Language)
• SPL (Splunk Processing Language)
• Security Investigation Queries
• Experience with EDR/XDR technologies, including endpoint investigation, threat detection, and response actions.
• Experience with Network Detection and Response (NDR) tools and network traffic analysis.
• Strong understanding of:
• Firewalls
• IDS/IPS
• DNS
• VPN
• TCP/IP
• Proxy Logs
• Network Segmentation
• Secure Network Architecture
• Knowledge of cybersecurity frameworks and compliance standards such as:
• NIST
• CIS Controls
• HIPAA
• State Security Requirements
• Strong troubleshooting, analytical, communication, and documentation skills.

Preferred Qualifications

• Bachelor's Degree in Cybersecurity, Computer Science, Information Systems, Information Technology, or a related field.
• 10+ years of experience in cybersecurity and security operations.
• Experience with Microsoft Defender and SentinelOne security solutions.
• Public sector, healthcare, or government security experience.
• Advanced threat hunting and detection engineering expertise.

Preferred Certifications

• Microsoft Certified: Security Operations Analyst Associate
• Microsoft Certified: Cybersecurity Architect Expert
• Microsoft Certified: Azure Security Engineer Associate
• Microsoft 365 Defender Certifications
• CISSP
• CISM
• CISA
• CompTIA Security+
• CompTIA CySA+
• GIAC Certifications
• Splunk Core Certified Power User
• Splunk Enterprise Security Certified Admin
• SentinelOne Product Certifications

Required Skills Matrix

• SIEM, SOAR, EDR, XDR, NDR
• Microsoft Sentinel
• KQL & SPL
• Threat Intelligence
• Security Log Management
• Detection Engineering
• Incident Response
• Threat Hunting
• Security Monitoring
• Endpoint Security
• Network Security
• Vulnerability Management
• Security Investigations
• Compliance & Regulatory Standards

Work Authorization: Candidates must successfully pass all required background and security reviews as mandated by HHSC policies and Texas state regulations.

Work Location: Austin, Texas (100% Onsite, Monday-Friday).