NOC Analyst

EVOTECH LLC•San Antonio, TX

2d•Onsite

About The Position

The Network Operations Center Analyst will support EvoTech’s Network operations by monitoring security events, performing incident analysis, and supporting Tier 1 and Tier 2 response activities. This role requires strong analytical skills, attention to detail, and the ability to follow established playbooks and escalation procedures to ensure timely and effective resolution of incidents. The Analyst will also support system administration tasks such as user access, account creation, log analysis, verification of security processes, and, working closely with end users, NOC/SOC teams and Field Service Representatives (FSRs). This is a full-time, on-site position based in San Antonio, Texas, requiring flexibility to work non-traditional hours, including nights, weekends, holidays, and swing shifts.

Requirements

Associate’s degree in computer science, Information Technology, Cybersecurity, or a related field (or equivalent experience).
Relevant cybersecurity certifications (e.g., CompTIA Security+, CySA+, CEH, or equivalent).
The ability to work for long periods of time at a desk in support of 24/7/365 operations.
Experience in Tier 1/Tier 2 cybersecurity operations, incident response, or SOC/NOC support.
Strong understanding of system administration, including user management, backups, and patching.
Familiarity with malware analysis, forensic investigation, and incident response procedures.
Knowledge of common cybersecurity frameworks and best practices.
Excellent written and verbal communication skills.
Strong problem-solving skills and ability to work in a fast-paced environment.
Willingness and ability to work in a 24/7 NOC environment, including rotating nights, weekends, holidays, and swing shifts.

Nice To Haves

Prior experience supporting federal government or Department of Defense contracts.
Experience with security monitoring and log analysis tools (e.g., SIEM solutions).
Familiarity with escalation procedures and ticketing systems.
Experience with Active Directory administration.

Responsibilities

Monitor network events and analyze alerts to create incidents or dismiss false positives.
Utilize ticketing system to track all incidents and actions to ensure proper metrics and remediation steps are recorded.
Administer user system access and permissions; respond to password reset and account unlock requests.
Troubleshoot straightforward system problems using appropriate tools, help desk instructions, SOPs, and problem solving skills.
Monitor configuration and status of servers, operating systems, and applications.
Assist with implementation of security patches and configuration changes (hardware and software).
Monitor system security posture, respond to alarms, and support security incident response and reporting.
Provide Tier 1 and Tier 2 support; coordinate with NOC and FSR teams to resolve and document incidents.
Receive customer calls and emails, open and log trouble tickets, and lead Tier I & 2 troubleshooting using knowledge base resources.
Assist customers that may not have much technical knowledge with issues related to applications, access or other technical issues.
Open, update, and resolve incident tickets, update documentation, and escalate issues by defined policies and procedures.
Support root cause analysis and corrective actions.