Analyze threat actor tactics, techniques, and procedures (TTPs) and translate findings into ... Minimum 5-7 years of experience in a cybersecurity operations role, with at least 3 years in a Tier ...
Analyze threat actor tactics, techniques, and procedures (TTPs) and translate findings into ... Minimum 5-7 years of experience in a cybersecurity operations role, with at least 3 years in a Tier ...
Analyze threat actor tactics, techniques, and procedures (TTPs) and translate findings into ... Minimum 5-7 years of experience in a cybersecurity operations role, with at least 3 years in a Tier ...
Analyze threat actor tactics, techniques, and procedures (TTPs) and translate findings into ... Minimum 5-7 years of experience in a cybersecurity operations role, with at least 3 years in a Tier ...
Serve as an escalation point to SOC Analysts providing support, guidance, as well as work and track security incidents through final resolution * Create and maintain incident response processes ...
Serve as an escalation point to SOC Analysts providing support, guidance, as well as work and track security incidents through final resolution * Create and maintain incident response processes ...
The Cybersecurity Operations Analyst is a member of the IT Security & Compliance team responsible for monitoring, triaging, and responding to security events across the organization's hybrid ...
The Cybersecurity Operations Analyst is a member of the IT Security & Compliance team responsible for monitoring, triaging, and responding to security events across the organization's hybrid ...
The Physical Security Operations Analyst is the on-site IC4 owner for the Shackelford, TX local SOC operating model. This role is not a people-manager position. It leads the SOC function ...
The Physical Security Operations Analyst is the on-site IC4 owner for the Shackelford, TX local SOC operating model. This role is not a people-manager position. It leads the SOC function ...
The Cybersecurity Operations Analyst is a member of the IT Security & Compliance team responsible for monitoring, triaging, and responding to security events across the organization's hybrid on ...
The Cybersecurity Operations Analyst is a member of the IT Security & Compliance team responsible for monitoring, triaging, and responding to security events across the organization's hybrid on ...
The Cybersecurity Operations Analyst is a member of the IT Security & Compliance team responsible for monitoring, triaging, and responding to security events across the organization's hybrid ...
The Cybersecurity Operations Analyst is a member of the IT Security & Compliance team responsible for monitoring, triaging, and responding to security events across the organization's hybrid ...
The Cybersecurity Operations Analyst is a member of the IT Security & Compliance team responsible for monitoring, triaging, and responding to security events across the organization's hybrid on ...
The Cybersecurity Operations Analyst is a member of the IT Security & Compliance team responsible for monitoring, triaging, and responding to security events across the organization's hybrid on ...
Security Operations Center (SOC) Analyst Duration : 6 months Location : Houston, TX Schedule : Monday - Friday: 7am - 4pm Role Summary The SOC Analyst is responsible for monitoring, investigating ...
Security Operations Center (SOC) Analyst Duration : 6 months Location : Houston, TX Schedule : Monday - Friday: 7am - 4pm Role Summary The SOC Analyst is responsible for monitoring, investigating ...
Analyze operational, labor and financial performance data to identify trends, risks, variances, and ... That said, to protect the integrity and security of our hiring process, we ask that candidatesdo ...
Analyze operational, labor and financial performance data to identify trends, risks, variances, and ... That said, to protect the integrity and security of our hiring process, we ask that candidatesdo ...
Security Operations Auditor
San Antonio, TX · On-site
$24 - $24.50/hr
Security Operations Auditor Security Operations Auditor Full-Time Pay: $24.00-$24.50 per hour ... Analyze trends and recurring operational issues, recommending process improvements where ...
Quick apply
Security Operations Auditor
San Antonio, TX · On-site
$24 - $24.50/hr
Security Operations Auditor Security Operations Auditor Full-Time Pay: $24.00-$24.50 per hour ... Analyze trends and recurring operational issues, recommending process improvements where ...
Required Qualifications Five or more years of intelligence analysis, threat monitoring, or security operations experience - or equivalent practical experience. Bachelor's degree in intelligence ...
New
Required Qualifications Five or more years of intelligence analysis, threat monitoring, or security operations experience - or equivalent practical experience. Bachelor's degree in intelligence ...
New
Required Qualifications Five or more years of intelligence analysis, threat monitoring, or security operations experience - or equivalent practical experience. Bachelor's degree in intelligence ...
New
Required Qualifications Five or more years of intelligence analysis, threat monitoring, or security operations experience - or equivalent practical experience. Bachelor's degree in intelligence ...
New
We are looking for a driven and self-motivated Intermediate Security Operations Centre Analyst for our Denver or Houston branches to work in an overnight role! You will monitor, investigate, and ...
We are looking for a driven and self-motivated Intermediate Security Operations Centre Analyst for our Denver or Houston branches to work in an overnight role! You will monitor, investigate, and ...
Security Operations Engineer
Austin, TX · On-site
Partner with other security analysts to understand their workflows, acting as a collaborative peer ... Previous experience working as a Security Operations Center (SOC) analyst or IT support technician ...
Security Operations Engineer
Austin, TX · On-site
Partner with other security analysts to understand their workflows, acting as a collaborative peer ... Previous experience working as a Security Operations Center (SOC) analyst or IT support technician ...
Security Operations Manager | Remote
Dallas, TX · On-site +1
Monitor and analyze threat intelligence to identify potential security threats. * Implement and manage threat detection and prevention technologies. * Conduct penetration testing and red-team ...
Security Operations Manager | Remote
Dallas, TX · On-site +1
Monitor and analyze threat intelligence to identify potential security threats. * Implement and manage threat detection and prevention technologies. * Conduct penetration testing and red-team ...
Description The Security Operations Center (SOC) Operator supports 24/7 security operations by monitoring, assessing, and responding to incidents across physical and technical security systems. This ...
Description The Security Operations Center (SOC) Operator supports 24/7 security operations by monitoring, assessing, and responding to incidents across physical and technical security systems. This ...
Security Operations Manager | Remote
Dallas, TX · On-site +1
Monitor and analyze threat intelligence to identify potential security threats. * Implement and manage threat detection and prevention technologies. * Conduct penetration testing and red-team ...
Security Operations Manager | Remote
Dallas, TX · On-site +1
Monitor and analyze threat intelligence to identify potential security threats. * Implement and manage threat detection and prevention technologies. * Conduct penetration testing and red-team ...
Monitor and analyze threat intelligence to identify potential security threats. * Implement and manage threat detection and prevention technologies. * Conduct penetration testing and red-team ...
Monitor and analyze threat intelligence to identify potential security threats. * Implement and manage threat detection and prevention technologies. * Conduct penetration testing and red-team ...
... network operations, infrastructure or design. A minimum of 2 years of Information Security ... Hands on experience analyzing or reviewing events from firewalls, IDS, HIPS, Windows AD event logs ...
... network operations, infrastructure or design. A minimum of 2 years of Information Security ... Hands on experience analyzing or reviewing events from firewalls, IDS, HIPS, Windows AD event logs ...
Intern Security Operations Analyst information
What does an intern security operations analyst do?
What types of projects and responsibilities can an intern security operations analyst expect to handle during their internship?
What are the key skills and qualifications needed to thrive as an intern security operations analyst, and why are they important?
What are the most commonly searched types of Security Operations Analyst jobs in Texas?
The most popular types of Security Operations Analyst jobs in Texas are:
What cities in Texas are hiring for Intern Security Operations Analyst jobs?
Cities in Texas with the most Intern Security Operations Analyst job openings:

Full-time
Medical, Dental, Vision, Retirement
Re-posted 26 days ago
Lennar rating
8.0
Based on 46 frontline employees who took The Breakroom Quiz
17th of 80 rated construction
Job description
Lennar is one of the nation's leading homebuilders, dedicated to making an impact and creating an extraordinary experience for their Homeowners, Communities, and Associates by building quality homes and providing exceptional customer service, giving back to the communities in which we work and live in, and fostering a culture of opportunity and growth for our Associates throughout their career. Lennar has been recognized as a Fortune 500® company and consistently ranked among the top homebuilders in the United States.
Join a Company that Empowers You to Build Your Future
We are seeking a highly skilled and experienced Senior SOC Analyst to join our cybersecurity team. This role is critical in leading advanced incident response efforts, managing escalations from cross functional teams and working closely with our MDR partner to ensure rapid detection, containment, and remediation of security threats. The ideal candidate will have deep technical expertise, strong analytical skills, and a proactive mindset toward incident response and continuous improvement.
- A career built on defending digital infrastructure.
- A career focused on proactive threat detection and response.
- A career that protects critical assets and enables secure business operations.
Your Responsibilities on the Team
Incident Response & Threat Management
- Lead investigations of complex, high severity security incidents from detection through containment, remediation, and recovery, coordinating across internal teams and the MDR partner.
- Act as the primary escalation point for Tier 3 alerts and incidents and perform root cause analysis with actionable remediation plans.
- Serve as the primary liaison to the MDR provider: validate and triage MDR alerts, ensure alignment on response protocols and escalation procedures, and provide tuning recommendations to improve detection fidelity.
- Develop and maintain incident response playbooks, runbooks, and workflows.
- Analyze threat actor tactics, techniques, and procedures (TTPs) and translate findings into improved defenses and detection content.
Threat Hunting
- Conduct proactive, hypothesis-driven threat hunts across endpoint, identity, network, and cloud telemetry, leveraging threat intelligence and the MITRE ATT&CK framework to surface threats that evade automated detection.
- Operationalize hunt findings into durable detection logic and response procedures.
Automation & Process Improvement
- Identify recurring, manual, or manual heavy SOC processes and design automation to reduce analyst effort and accelerate response.
- Build, test, and maintain automated playbooks and response workflows in a SOAR platform (e.g., Torq, Microsoft Sentinel Automation Rules and Logic Apps) for enrichment, triage, containment, and case management.
- Develop, tune, and operationalize detection and correlation rules through automated validation and deployment.
- Measure the impact of automation against SOC performance metrics (MTTD, MTTR, alert volume, false-positive rate) and iterate based on results.
- Partner with Detection Engineering and Security Engineering to integrate tooling, close telemetry gaps, and standardize repeatable response.
Security Monitoring & Analysis
- Monitor and analyze logs and alerts across SIEM, EDR, identity, and cloud platforms.
- Correlate data across multiple sources to identify patterns, anomalies, and emerging threats.
- Maintain situational awareness of the external threat landscape and internal security posture.
Mentorship & Reporting
- Mentor Tier 1 and Tier 2 analysts, lead knowledge-sharing, and uplevel team investigative tradecraft and tooling proficiency.
- Document incident timelines, findings, and lessons learned.
- Track, analyze, and drive improvement of core SOC performance metrics (MTTD, MTTR, detection coverage, false-positive rate), and use them to prioritize tuning and automation efforts.
- Generate executive-level and technical reports on SOC performance and incidents, and support compliance and audit efforts through accurate record-keeping and evidence handling.
Requirements
- Minimum 5-7 years of experience in a cybersecurity operations role, with at least 3 years in a Tier 2/Tier 3 SOC or escalation capacity.
- CompTIA Security+ or equivalent.
- Proven experience leading incident response triage, investigation, and remediation, including working directly with MDR partners.
- In-depth knowledge of security tools and technologies, including SIEM/SOAR platforms (e.g., Microsoft Sentinel), endpoint detection and response solutions (e.g., Microsoft Defender XDR, Palo Alto Cortex XDR), and ticketing systems (e.g., ServiceNow).
- Demonstrated ability to author and tune detection content (e.g., KQL in Sentinel/Defender) and operationalize it into production.
- Experience analyzing cloud security telemetry (e.g., Azure/Entra sign-in logs, AWS CloudTrail).
- Hands-on experience building or maintaining automated playbooks and response workflows in a SOAR platform.
- Strong understanding of network security concepts, operating systems, and malware analysis techniques.
- Familiarity with the MITRE ATT&CK framework and threat intelligence platforms.
- Excellent analytical, problem-solving, and communication skills, with the ability to work under pressure and manage multiple priorities.
Preferred
- Certifications such as CISSP, GCIA, GCIH, GCFA, CySA+, eJPT/PJPT, CEH, SC-200.
- Scripting and automation skills (Python, PowerShell) for tooling, enrichment, and analysis.
- Experience supporting an EDR platform migration (e.g., Cortex XDR to Microsoft Defender XDR).
- Experience with or strong interest in AI-assisted triage and agentic SOC tooling to augment analyst workflows.
- Broader cloud security experience across AWS, Azure, and OCI.
- Experience with Microsoft Sentinel, Proofpoint, and Palo Alto Cortex XDR.
Work Environment
- Mandatory 4-days onsite; 1-days remote.
- On-call rotation may be required for critical incident response.
- Collaborative team environment with opportunities for growth and specialization.
This description outlines the basic responsibilities and requirements for the position noted. This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities and activities may change at any time with or without notice.
Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.
Life at Lennar
At Lennar, we are committed to fostering a supportive and enriching environment for our Associates, offering a comprehensive array of benefits designed to enhance their well-being and professional growth. Our Associates have access to robust health insurance plans, including Medical, Dental, and Vision coverage, ensuring their health needs are well taken care of. Our 401(k) Retirement Plan, complete with a $1 for $1 Company Match up to 5%, helps secure their financial future, while Paid Parental Leave and an Associate Assistance Plan provide essential support during life's critical moments. To further support our Associates, we provide an Education Assistance Program and up to $30,000 in Adoption Assistance, underscoring our commitment to their diverse needs and aspirations. From the moment of hire, they can enjoy up to three weeks of vacation annually, alongside generous Holiday, Sick Leave, and Personal Day policies. Additionally, we offer a New Hire Referral Bonus Program, significant Home Purchase Discounts, and unique opportunities such as the Everyone's Included Day. At Lennar, we believe in investing in our Associates, empowering them to thrive both personally and professionally. Lennar Associates will have access to these benefits as outlined by Lennar's policies and applicable plan terms. Visit Lennartotalrewards.com to view our suite of benefits.
Join the fun and follow us on social media to see what's happening at our company, and don't forget to connect with us on Lennar: Overview | LinkedIn for the latest job opportunities.
Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.
About Lennar
Sourced by ZipRecruiter
Since 1954, Lennar has built over one million new homes for families across America. We build in some of the nation’s most popular cities, and our communities cater to all lifestyles and family dynamics, whether you are a first-time or move-up buyer, multigenerational family, or Active Adult.
Industry
Construction
Company size
5,001 - 10,000 Employees
Headquarters location
Miami, FL, US
Year founded
1954