Security Operations

• Run daily, weekly, and periodic IT and security checklists, with a focus on Google SecOps/Chronicle monitoring
• Perform health checks across GCP infrastructure, SaaS applications, and security tooling (alerts, compliance, CI/CD pipelines)
• Troubleshoot security or infrastructure issues, document fixes, and raise follow-up actions
• Collaborate with DevOps and InfraOps on platform-level and security-related issues
• Identify and propose security and platform improvements as you gain business context
• Implement automation, security tooling, and platform enhancements to strengthen cloud and SaaS environments
• Contribute to scripts, dashboards, and operational improvements with a focus on security and compliance
• Feed insights from day-to-day work into long-term IT security and operational strategy
• Occasionally assist with IT support tasks across systems, hardware, and software
• Prioritize tasks effectively and align timelines with stakeholders

IT & Security Operations Analyst

• Owns the security, availability, and compliance of the systems.
• Operate and evidence the controls required for SOC 2 Type 2 and HIPAA.
• Maintain the risk register and run an annual risk assessment.
• Enforce least privilege access across corporate and production systems.
• Manage cloud hosting vendors and environment changes.
• Monitor the security of corporate and cloud environments.
• Manage the team providing technical support to employees.
• Design and manage the disaster-recovery and business-continuity process.

Director of IT – Security Operations

• Responsible for ASIC design verification of fabric and interconnect IP blocks as well as full chip integration, covering DMA, routing, arbitration, ordering, flow control, and protocol compliance.
• Develop and implement test plans for fabric and interconnect verification of SoCs using UVM-based environments, targeting both IP-level and system-level scenarios.
• Design and implement constrained-random and directed SystemVerilog testbenches targeting interconnect fabrics, network-on-chip (NoC) topologies, and multi-agent SoC integrations.
• Collaborate extensively with Architecture, SW/FW, Design, Modeling, Emulation, and Post-Silicon Validation teams to ensure comprehensive first-time right verification plans and execution.
• Drive the development of silicon and platform verification strategies and methodologies for fabric and interconnect subsystems.

Custom SOC IP Verification Engineer

• Lead end-to-end physical verification sign-off for full-chip designs
• Execute foundry-qualified rule decks and manage waivers
• Perform reliability verification across multiple power domains
• Run density, metal fill, and CMP checks
• Develop and optimize physical verification flows using Python and Tcl

SoC Physical Verification Engineer, HBM

• Provides technical and operational support for Vector3's MDR customers.
• Assists with incident follow-up, technical troubleshooting, remediation validation, compliance reviews, platform administration, and operational security initiatives.
• Serves as the technical backbone of the MDR team, allowing TAMs to focus on customer engagement and business growth.
• Reviews and investigates MDR alerts requiring customer follow-up.
• Conducts log analysis and security investigations.
• Support deployment and administration of Sophos MDR technologies.
• Supports Cyber Hygiene assessments and compliance reviews.
• Coordinates with Sophos MDR teams during investigations and participates in service improvement initiatives.

Security Operations Engineer

• Lead investigations of complex, high severity security incidents from detection through containment, remediation, and recovery
• Act as the primary escalation point for Tier 3 alerts and incidents
• Perform root cause analysis with actionable remediation plans
• Serve as the primary liaison to the MDR provider
• Validate and triage MDR alerts
• Ensure alignment on response protocols and escalation procedures
• Provide tuning recommendations to improve detection fidelity
• Develop and maintain incident response playbooks, runbooks, and workflows
• Analyze threat actor tactics, techniques, and procedures (TTPs) and translate findings into improved defenses and detection content
• Conduct proactive, hypothesis-driven threat hunts across endpoint, identity, network, and cloud telemetry
• Leverage threat intelligence and the MITRE ATT&CK framework to surface threats that evade automated detection
• Identify recurring, manual, or manual heavy SOC processes
• Design automation to reduce analyst effort and accelerate response
• Build, test, and maintain automated playbooks and response workflows in a SOAR platform
• Monitor and analyze logs and alerts across SIEM, EDR, identity, and cloud platforms
• Correlate data across multiple sources to identify patterns, anomalies, and emerging threats
• Mentor Tier 1 and Tier 2 analysts
• Document incident timelines, findings, and lessons learned
• Generate executive-level and technical reports on SOC performance and incidents

Senior Security Analyst – Security Operations Center

• Design, implement, and enhance Azure DevOps platform capabilities, including reusable CI/CD templates, pipeline standards, and developer enablement tooling
• Build and optimize secure CI/CD pipelines supporting multiple product lines, integrating security scanning, secrets management, artifact validation, and policy enforcement
• Build and support scalable development and QA environments, improving provisioning, configuration management, and deployment automation
• Implement and maintain infrastructure-as-code solutions using Terraform, Ansible, and PowerShell across Azure cloud environments
• Partner with Product Security and Infrastructure teams to embed secure-by-design principles into SDLC workflows and support vulnerability remediation initiatives
• Monitor CI/CD platform health and troubleshoot pipeline failures, deployment issues, and environment-related problems
• Mentor junior engineers and promote DevSecOps best practices across Engineering, QA, Security, and Infrastructure teams

Senior Cyber-Security Operations Analyst, Product AppSec

• Operate and maintain CI/CD pipelines, build agents, and supporting infrastructure across development, staging, and pre-production environments
• Configure and integrate application security tooling, including logging, monitoring, alerting, and dashboard management
• Support SIEM operations including log onboarding, detection tuning, alert triage, and incident response
• Manage patching of CI/CD infrastructure, build agents, container base images, and platform dependencies
• Monitor health, availability, and performance of security tools and DevSecOps platform components
• Partner with IT and Engineering teams on CI/CD toolchain support, including upgrades, capacity planning, and access management
• Collaborate with engineering teams to triage issues, document workflows, and share operational knowledge

Cyber-Security Operations Analyst III, Product AppSec

• Support with our vulnerability management program, provide reporting and assist IT owners with security weaknesses
• Own the penetration test schedule for Odevo US, co-ordinating with third parties who provide our pen tests
• Work with software developers to help ensure secure coding practices are in place
• Assist in security incidents, determine root cause, and recommend corrective actions
• Participate in the design and implementation of security solutions
• Stay up-to-date on the latest security threats, vulnerabilities, and best practices
• Manage BAU (Business As Usual) activities, including responding to Security tickets and security queries
• Collaborate with other IT teams to ensure the security of systems and applications

Cyber Security Operations Analyst

• Define top-level or cross-subsystem digital architecture for Satellite communication ASICs and SoCs.
• Lead hardware realization of key communication functions such as modem pipelines, coding engines, digital beamforming, switching fabrics, and packet/data processing.
• Drive end-to-end technical planning from concept through silicon validation.
• Establish system-level tradeoffs among throughput, latency, power, die area, reliability, and manufacturability.
• Provide technical leadership across design, verification, physical design, firmware, packaging, and system teams.
• Review and influence architectural partitioning between ASIC, FPGA, software, and RF/analog domains.
• Develop methodologies and reusable IP strategies that improve schedule, quality, and scalability.
• Mentor technical leaders and act as a go-to expert for critical design reviews and issue resolution.
• Support roadmap planning and future product definition.

Principal Modem SoC Engineer

• Monitor, triage, and investigate alerts across SIEM, EDR, NDR, and DLP platforms
• Lead or support incident response activities including scoping, containment, eradication, and post-incident review in alignment with NIST SP 800-61r2
• Develop, tune, and maintain detection rules, correlation queries, and behavioral models across the security stack
• Conduct threat hunting exercises using structured methodologies (MITRE ATT&CK, hypothesis-driven)
• Build and maintain security automation workflows to reduce manual triage and accelerate response (Python, PowerShell, GitHub Actions, REST APIs)
• Integrate security tooling with ticketing and workflow platforms (Jira) for consistent case management and SLA tracking
• Contribute to SOAR playbook development and refinement
• Support vulnerability management operations including Tenable scan management, findings triage, and Jira-based remediation tracking
• Maintain and optimize SIEM content, log pipelines, and data sources; ensure complete and accurate log ingestion from cloud, endpoint, network, and identity layers
• Manage and tune EDR policies, exclusions, and response actions within CrowdStrike Falcon
• Support DLP policy operations, including investigation support for policy violations
• Maintain firewall log visibility and coordinate with network/infrastructure teams on Fortinet policy enforcement
• Support evidence collection and control testing for HITRUST CSF v11 and SOC 2 Type II assessments
• Contribute to security documentation including runbooks, playbooks, and operational procedures
• Participate in tabletop exercises and contribute to lessons-learned outcomes
• Support identity and access-related security reviews in collaboration with the IAM/infrastructure team
• Monitor and investigate anomalous activity associated with AI agent infrastructure, API integrations, and LLM-based services
• Contribute to security controls and detection coverage for AI workloads under the organization’s AI governance framework
• Help develop behavioral baselines and detection logic specific to AI/agentic traffic patterns

• Actively participate in 24x7 operations of the Long View Security Operations Centre
• Monitor, identify and validate security events generated from Security Information Event Management (SIEM) tools
• Actively work in monitoring, event and incident management tools like Sentinel and ServiceNow
• Respond to critical business impacting situations and coordinate the efforts required to engage the proper resources to remediate the issue
• Coordinate major security incident situations and provide internal communications via email in a timely manor
• Provide general support for Security Information Event Management (SIEM) tool changes, tweaks, additions and updates within Sentinel and any additional tools leveraged by Long View
• Provide security guidance to team members across the organization how to best identify, contain and remediate security related incidents
• Understand complex issues across on-premise, public and private cloud solutions and articulate the impact to higher tier team members
• Follow and establish process documentation for receipt of security alerts for monitored devices, acknowledge the receipt of the event, opening and/or updating service desk tickets to track the handling of events to resolution and closure, assignment of the ticket to the appropriate owner
• Work with cloud technologies like Azure, AWS and Google Cloud Platform
• Fulfill reporting requests that can be pulled from Long View tools

Junior Security Operations Center Analyst

• Design, develop, and maintain security-focused platforms using scripting languages, C++, and Rust.
• Implement modern development processes (CI/CD, DevOps, Agile) to ensure efficient and reliable delivery.
• Build scalable solutions across Linux-based environments and cloud-native architectures.
• Integrate diverse systems using APIs, webhooks, and other communication protocols.
• Develop and maintain integrations with AI-driven tools and data enrichment platforms to enhance SecOps capabilities.
• Collaborate with SecOps teams to design and implement advanced monitoring, detection, and response solutions.
• Troubleshoot complex systems and resolve performance, reliability, and security issues.
• Architect and manage cloud-based environments (AWS, Azure, GCP) with a focus on security and scalability.
• Optimize Linux OS and kernel-level configurations for performance and resilience.
• Automate infrastructure provisioning and configuration management.

Senior Cybersecurity Engineer – Security Operations

• Overseeing and monitoring multiple feeds in a 24/7 environment to detect, verify, and respond to cyber threats
• Collaborating with multiple teams and personnel, including other SOC analysts and subject matter experts
• Participating in red-team/blue-team simulated attacks and tabletop exercises
• Partnering with Security Design and Architecture Engineers to implement and improve technology and processes to enhance SOC monitoring, investigation, and response capabilities

Senior SOC Analyst – 2ND/3RD SHIFT

• Monitor security alerts and events in the Security Operations Center (SOC) and perform initial triage, analysis, and escalation as needed.
• Investigate potential security incidents using SIEM, endpoint, network, and other security tools to determine scope, impact, and next steps.
• Document findings, actions taken, and incident details clearly and accurately in accordance with SOC procedures and reporting requirements.
• Escalate confirmed or high-risk incidents to senior analysts or incident response teams when appropriate.
• Support threat detection, alert tuning, and ongoing improvement of SOC monitoring processes and playbooks.
• Collaborate with internal teams to gather information, support investigations, and help protect enterprise systems and data.
• Stay current on common cyber threats, vulnerabilities, and attacker tactics, techniques, and procedures (TTPs).

SOC Analyst, Tier 1

SOC Analyst – Shift Lead

SOC Analyst, Tier 2

• Independently lead multiple technical engagements simultaneously, ensuring timely delivery of measurable security outcomes and operational improvements across client environments
• Convert client business requirements into actionable technical strategies and capabilities that align with security objectives and deliver measurable value
• Collaborate with internal teams and clients to design strategic roadmaps and execute plans that advance operational maturity and security posture
• Drive service maturity by analyzing KPIs, SLAs, and performance trends to deliver actionable insights and continuous value improvements
• Evaluate and align security solutions and recommendations with client requirements, risk profiles, and strategic objectives to ensure optimal fit and effectiveness
• Assist in the documentation of business requirements, use cases, and ROI analyses to support informed decision-making and demonstrate value
• Act as a technical advisor during pre-sales and post-sales engagements, ensuring solution alignment and client confidence
• Provide technical expertise for proposals, contracts, and service descriptions to ensure accuracy and alignment with client needs
• Recognize and recommend cross-sell and up-sell opportunities across AFC services
• Lead or support security initiatives from planning through execution
• Apply hands-on expertise to operationalize threat intelligence across EDR, SIEM, SOAR, and related domains, improving detection and response capabilities
• Analyze patterns and anomalies to identify potential advanced threats and recommend proactive mitigation strategies
• Conduct architectural reviews and provide recommendations to strengthen security, posture and operational efficiency
• Assess and recommend custom detection logic, automation, or tool enhancements to address evolving threats and operational needs
• Assist with platform configurations, detection logic, automation improvements
• Build and develop relationships with internal and external stakeholders
• Identify and assess project risks, developing mitigation strategies to ensure successful delivery and minimize impact
• Validate project scope and deliverables to ensure alignment with client expectations and contractual obligations
• Represent Optiv in client meetings, delivering clear technical guidance and executive-level communication
• Collaborate with team members to identify issues, develop strategies, and drive continuous improvement
• Provide support for projects spanning multiple functional groups by identifying collaborative opportunities, enhancing existing deliverables, and strengthening Optiv’s value to our clients
• Ensure projects are delivered on time, within budget, and to quality standards, meeting or exceeding client expectations

Cyber Operations Advisor

• Serves as a senior technical leader within the Cybersecurity Operations Center
• Focused on advancing detection engineering, automated response, and threat intelligence capabilities
• Responsible for designing, developing, and continuously improving high-fidelity detections across enterprise telemetry
• Engineering automated response workflows that reduce response times and operational burden
• Champion modern CSOC practices including detection-as-code, threat-informed defense, and integration of AI and agentic workflows
• Partners closely with cross-functional teams across infrastructure, cloud, identity, and application domains
• Drives innovation in CSOC operations, translates threat intelligence into actionable detections and hunts
• Mentors junior engineers and analysts, fostering technical growth and promoting scalable, repeatable security operations processes

Senior Cybersecurity Operations Engineer – AI

• engineering, maintaining, and optimizing the automation architecture across our cybersecurity ecosystem
• developing, deploying, and maintaining automation scripts utilizing Python, Bash, and PowerShell
• architecting integrations between security tools and enterprise applications via REST APIs
• designing and maintaining automated processes for vulnerability management, patch management, and compliance reporting
• driving the automation of continuous compliance monitoring and evidence gathering for critical frameworks
• automating security monitoring, anomaly detection, and response workflows
• executing proof-of-concept testing and validation for new security methodologies and tooling
• maintaining documentation for all engineered scripts, API integrations, and automation workflows
• designing and implementing full-stack solutions to aggregate, transform, and visualize security data
• developing dashboards and reporting systems for continuous visibility into compliance status and vulnerabilities
• applying data modeling and anomaly detection to identify suspicious activities
• partnering with technical teams to analyze existing workflows and engineer automated security solutions

Security Operations jobs in Texas

See all jobs on JobTailor

IT & Security Operations Analyst

Director of IT – Security Operations

Custom SOC IP Verification Engineer

SoC Physical Verification Engineer, HBM

Security Operations Engineer

Senior Security Analyst – Security Operations Center

Senior Cyber-Security Operations Analyst, Product AppSec

Cyber-Security Operations Analyst III, Product AppSec

Cyber Security Operations Analyst

Principal Modem SoC Engineer

Security Operations Engineer

Junior Security Operations Center Analyst

Senior Cybersecurity Engineer – Security Operations

Senior SOC Analyst – 2ND/3RD SHIFT

SOC Analyst, Tier 1

SOC Analyst – Shift Lead

SOC Analyst, Tier 2

Cyber Operations Advisor

Senior Cybersecurity Operations Engineer – AI

Security Operations Engineer I