Title: Cybersecurity Analyst
Location: New Orleans, LA / The Woodlands, TX / Little Rock, AR (Hybrid)
Fulltime with ComTec
Shift 1 (Day): 6:00 AM to 6:00 PM (12 hrs on Sunday, Monday, Tuesday, and 12 hrs every alternate Saturday)
Shift 2 (Day): 6:00 AM to 6:00 PM (12 hrs on Wednesday, Thursday, Friday, and 12 hrs every alternate Saturday)
Onsite: Day Shift resources need to go onsite 2 days a week
Shift 3 (Dight): 6:00 PM to 6:00 AM (7 days On – 7 days Off) [One week 7 consecutive days including weekends, Next complete week off]
Onsite: Night shift resources don’t need to go onsite
ComTec is seeking a Cybersecurity Analyst to support security monitoring, alert analysis, threat detection, and incident response within a SOC environment. The role involves analyzing SIEM and firewall alerts, reviewing logs, investigating potential incidents, and detecting phishing attempts to help protect critical IT infrastructure.
Key Responsibilities:
- Monitor and review security alerts from SIEM, firewalls and other security tools, and investigate potential malware, phishing, and unauthorized-access activity.
- Analyze relevant logs and alert data to help identify incident causes, scope, and potential impact.
- Support threat-hunting activities by analyzing alerts from SIEM and firewalls and gather threat intelligence to inform security monitoring.
- Assist with developing and updating detection rules, response playbooks, and SOAR workflows based on investigation findings.
- Use the MITRE ATT&CK framework to help interpret alerts and threat activity.
- Participate in attack simulations and tabletop exercises to improve SOC readiness.
- Prepare incident reports and post-incident documentation and contribute to lessons-learned reviews.
- Stay informed about emerging threats and the use of AI and Agentic AI in cybersecurity.
- Participate in an on-call rotation approximately every 4–6 weeks.
- Be willing to travel up to 25% for training and incident support.
Required Skills:
- 2+ years of cybersecurity experience in key areas such as asset management, threat and vulnerability management, and incident response.
- Familiarity with SIEM, SOAR, IDS/IPS, and forensic tools.
- Familiarity with security monitoring platforms such as Splunk and CrowdStrike.
- Understanding of adversary tactics using the MITRE ATT&CK framework.
- Experience with email security tools and phishing detection.
- Ability to analyze advanced cyber threats and support investigations.
- Familiarity with regulations like SOX and NERC CIP and experience supporting audits or assessments.
- Ability to perform data analysis, integration, and validation activities related to security operations.
- Basic knowledge of cloud, ICS, OT, and network security principles.
- Understanding of AI and Agentic AI tools used in cybersecurity.
- Collaborative team player with strong analytical and communication skills.
- Self-motivated, resourceful, and customer-focused with a strong sense of ownership.
- Certifications such as CompTIA, GIAC, ISC2 are a plus.
