ZipRecruiter

Log In

1

Security Operations Analyst Soc Jobs in Texas (NOW HIRING)

Saronic

Senior Security Operations Analyst

Austin, TX · On-site

Experience writing or iterating on detection logic, response playbooks, or SOC operational ... Security Clearance eligible. Demonstrated experience triaging and investigating alerts across at ...

The LaSalle Group

SOC Analyst

Plano, TX · On-site

$30 - $40/hr

SOC Analyst Overview A leading healthcare organization is seeking a SOC Analyst to join its growing ... This role will support daily Security Operations Center (SOC) functions, including alert monitoring ...

IBM

Security Operations Center Analyst

Austin, TX · On-site

The Security Operations Center (SOC) serves as the front line of IBM's cyber defense mission ... Your role and responsibilities As a SOC Analyst, you will serve as a first responder to ...

ASM Global

Security Operations Lead

Frisco, TX · On-site

Joining a team of SOC Analysts, the Security Operations Lead sets the standard on how to identify, triage, and resolve cybersecurity incidents, and demonstrates this to the SOC team. This role is a ...

next page

Showing results 1-20

All JobsSecurity Operations Analyst Soc JobsSecurity Operations Analyst Soc Jobs in Texas

Security Operations Analyst Soc information

What is a security operations analyst SOC?

A Security Operations Analyst (SOC) is a cybersecurity professional responsible for monitoring, detecting, and responding to security threats within an organization's IT environment. Working in a Security Operations Center (SOC), these analysts use a variety of tools and technologies to analyze security incidents, investigate alerts, and support incident response efforts. Their primary goal is to protect the organization's data and systems from cyberattacks by identifying vulnerabilities and mitigating risks. The role often involves collaborating with other IT and security teams to develop and implement effective security measures.

What are some typical challenges faced by a security operations analyst SOC and how can they be managed effectively?

Security Operations Analysts in a SOC often face challenges such as managing high volumes of security alerts, distinguishing between real threats and false positives, and staying updated with evolving cyber threats. Working in a fast-paced environment, analysts must prioritize incidents based on risk and impact, often collaborating closely with IT and incident response teams. Effective time management, continual training, and leveraging automation tools can help manage these challenges and support ongoing professional growth within the field.

What are the key skills and qualifications needed to thrive as a security operations analyst SOC, and why are they important?

To thrive as a Security Operations Analyst (SOC), you need strong analytical skills, a solid understanding of cybersecurity principles, and a relevant degree or certifications such as CompTIA Security+ or CISSP. Proficiency with SIEM tools like Splunk, intrusion detection systems, and network monitoring platforms is typically required. Attention to detail, problem-solving abilities, and effective communication help analysts quickly identify and respond to security incidents. These skills and qualities are essential for protecting organizational assets and ensuring rapid, coordinated responses to threats in a high-pressure environment.

What is the difference between Security Operations Analyst Soc vs Security Analyst?

AspectSecurity Operations Analyst SocSecurity Analyst
CertificationsCompTIA Security+, CISSP, CEHCompTIA Security+, CISSP, CEH
Work EnvironmentSecurity operations centers, 24/7 monitoringOffice or remote, project-based
Employer & IndustryCybersecurity firms, large corporations, government agenciesVarious industries including finance, healthcare, tech

The main difference is that Security Operations Analysts Soc focus on real-time security monitoring, incident response, and managing security tools within a Security Operations Center. Security Analysts may have a broader role, including vulnerability assessments, security audits, and policy development. Both roles require similar certifications and often overlap in skills, but the Soc role is more centered on operational security and incident handling in a dedicated environment.

What cities in Texas are hiring for Security Operations Analyst Soc jobs?

Cities in Texas with the most Security Operations Analyst Soc job openings:

Infographic showing various Security Operations Analyst Soc job openings in Texas as of July 2026, with employment types broken down into 88% Full Time, 7% Part Time, 1% Temporary, and 4% Contract. Highlights an 82% Physical, 8% Hybrid, and 10% Remote job distribution.

Security Operations Analyst

Austin, TX • On-site

NightDragon Acquisition Corp.
See more jobs at NightDragon Acquisition Corp.external

Other

Medical, Dental, Vision, Life, Retirement, PTO

Posted 8 days ago

Key responsibilities

  • Monitor and triage security alerts across endpoint, cloud, identity, network, and SaaS telemetry using SIEM and XDR platforms

  • Own initial response for well-scoped incidents to contain, eradicate, and recover from security events

  • Support the development of response playbooks, runbooks, and analyst workflow documentation

Job description

Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.

Job Overview

Saronic Technologies is a leader in revolutionizing autonomy at sea, developing cutting-edge unmanned surface vessels (USVs) to enhance maritime operations for defense and national security. We're looking for a hands-on Security Engineer to join our Security Operations team on the front line of detection and response.

You'll triage and investigate security alerts across endpoint, cloud, identity, network, and SaaS telemetry using our SIEM and XDR platforms, run root-cause analysis on real events, and own initial response for well-scoped incidents to contain, eradicate, recover. You'll tune detections to cut noise, join the on-call rotation, run targeted threat hunts, and contribute to the playbooks and post-incident reviews that make the team better. This is an early, formative role on a SecOps team being built from the ground up, with senior engineers to learn from and real room to grow across security domains rather than being boxed into one lane.

ResponsibilitiesDetection & Alert Operations

  • Monitor and triage alerts across endpoint, cloud, identity, network, and SaaS telemetry using enterprise SIEM and XDR platforms

  • Investigate alerts and perform root-cause analysis, documenting clear timelines and impact assessments

  • Tune existing detections to reduce false positives, and surface gaps and tuning needs to Detection Engineering

Incident Response & Investigation

  • Own initial response for well-scoped, mid-tier incidents across endpoint, cloud, and identity to contain, eradicate, recover

  • Participate in the on-call rotation and communicate status and findings to security leadership and stakeholders

  • Contribute to post-incident reviews, surfacing gaps in detection, response, and containment

  • Coordinate with Security Engineering and IT during active incidents to accelerate response

SecOps Foundation & Enablement

  • Support security leadership and senior engineers in building response playbooks, runbooks, and analyst workflow documentation

  • Run targeted threat hunts to find activity that automated detections miss

  • Contribute to SecOps metrics, reporting, and operational-readiness reviews

  • Grow your depth across detection, investigation, and hunting as the team scales

Qualifications

  • 2–5 years of hands-on Security Operations, alert triage/SOC, or incident response experience, or an equivalent combination of experience and demonstrated ability; we are open to strong early-career talent

  • Experience triaging and investigating alerts across at least two of: endpoint, cloud, identity, network, or SaaS

  • Working proficiency with an enterprise SIEM platform and its query language; able to write investigative queries and tune existing detections

  • Hands-on experience with EDR tooling to triage, hunt, and respond using endpoint telemetry

  • Solid understanding of attacker TTPs mapped to MITRE ATT&CK, applied during investigations

  • Scripting proficiency in Python, PowerShell, or Bash for enrichment, automation, or triage

  • Strong network fundamentals: TCP/IP, DNS, HTTP/S, firewall and proxy logs, and lateral-movement patterns

  • Clear, structured written and verbal communication skills and can brief a non-technical stakeholder and write a thorough incident report

  • Ownership mindset: follows incidents through to closure and flags what needs fixing, not just what needs documenting

  • Hands-on learning signals such as a home lab, CTF participation, personal detection/hunting projects, or public writeups/blogs

  • Internship, rotational, or help-desk-to-SOC experience with a clear security operations trajectory

  • Ability to obtain and maintain a U.S. security clearance

Preferred Qualifications

  • Experience with XDR platforms and cross-domain correlated detection across endpoint, identity, and cloud

  • Familiarity with cloud-native security operations and log sources in AWS or Azure

  • Experience with SOAR platforms or building response-automation workflows

  • Exposure to supply-chain and CI/CD pipeline security monitoring

  • Familiarity with data lake-based or pipeline-driven detection architectures

  • Background in defense, aerospace, robotics, or other high-assurance operational environments

  • Familiarity with compliance frameworks such as NIST SP 800-171 or NIST SP 800-53

  • Relevant certifications are a plus but never a gate, including GIAC GCIH, GCIA, GCFA, GCFE, GCDA, GSOM, CySA+, BTL1/2, OSCP, or CISSP

  • Active security clearance or prior clearance history is a strong differentiator

Physical Demands

  • Prolonged periods of sitting at a desk and working on a computer

  • Occasional standing and walking within the office

  • Manual dexterity to operate a computer keyboard, mouse, and other office equipment

  • Visual acuity to read screens, documents, and reports

  • Occasional reaching, bending, or stooping to access file drawers, cabinets, or office supplies

  • Lifting and carrying items up to 20 pounds occasionally (e.g., office supplies, packages)

Benefits
  • Medical Insurance: Comprehensive health insurance plans covering a range of services
    Saronic pays 100% of the premium for employees and 80% for dependents
  • Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care
    Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents
  • Time Off: Generous PTO and Holidays
  • Parental Leave: Paid maternity and paternity leave to support new parents
  • Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses
  • Retirement Plan: 401(k) plan with company match
  • Stock Options: Equity options to give employees a stake in the company’s success
  • Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage
  • Pet Insurance: Discounted pet insurance options including 24/7 Telehealth helpline
  • Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office

Saronic CCPA Notice for Candidates and California Employees

If this role is based in the United States, it requires access to export-controlled information or items that require “U.S. Person” status. As defined by U.S. law, individuals who are any one of the following are considered to be a “U.S. Person”: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3).

Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits. We are also committed to providing reasonable accommodations for qualified individuals with disabilities.

#J-18808-Ljbffr

Apply