Network Security Analyst 1

Required Qualifications 

· Minimum of five (5) years of experience in cybersecurity operations, security monitoring, incident response, threat detection, security investigations, or related cybersecurity disciplines. 

· Experience working with one or more of the following technologies: 

· SIEM platforms (NetWitness, Microsoft Sentinel, Splunk, QRadar, ArcSight, LogRhythm, etc.) 

· Microsoft Security (Microsoft 365 Defender XDR, Microsoft Sentinel) 

· Endpoint Detection and Response (Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, etc.) 

· IDS/IPS technologies (Trellix/FireEye, Corelight) 

· Threat intelligence platforms (VirusTotal, Google Threat Intelligence, Cisco Talos, Recorded Future, MISP) 

· Vulnerability management tools (Tenable, Qualys, Rapid7) 

· Email security platforms (IronPort ESA, Abnormal.ai, Proofpoint) 

· Cloud security monitoring solutions (Google Wiz, MDCA, Cortex Cloud, Sysdig) 

· Secure Access Service Edge (Zscaler, Prisma, Netskope) 

· Experience triaging security alerts, analyzing security events, and documenting incident investigations. 

· Experience with cybersecurity frameworks, incident response processes, and threat detection methodologies. 

Work Expectations 

· Participate in incident response, escalation, and after-action review activities as needed. 

· Support enterprise security monitoring for systems that process, store, or transmit sensitive information. 

· Follow HHSC policies, procedures, standards, and applicable state and federal security requirements. 

· Maintain accurate operational documentation, investigation notes, metrics, and leadership-ready summaries. 

· Must be able to provide support outside of normal business hours during high-priority security incidents, as approved by the SOC Manager. 

II.  CANDIDATE SKILLS AND QUALIFICATIONS