NOC Analyst
On-site NOC Analyst at a federal IT/cybersecurity services contractor in San Antonio, TX: monitors network and security events, triages alerts, provides Tier 1/2 incident response, administers user access and accounts, and logs/escalates tickets on a 24/7 rotating shift schedule. Key tools include SIEM, ticketing systems, and Active Directory.
- Compensation
- Not disclosed
- Location
- San Antonio, TX, San Antonio, TX, US
- Work setup
- Onsite
- Seniority
- Not specified
- Employment
- Full time
- Experience
- Not specified
- Category
- It support
- Posted
Skills
Must have
- Associate's degree in computer science, IT, cybersecurity, or related field (or equivalent experience)
- Relevant cybersecurity certifications (e.g., CompTIA Security+, CySA+, CEH, or equivalent)
- Ability to work long periods at a desk supporting 24/7/365 operations
- Experience in Tier 1/Tier 2 cybersecurity operations, incident response, or SOC/NOC support
- Strong understanding of system administration, including user management, backups, and patching
- Familiarity with malware analysis, forensic investigation, and incident response procedures
- Knowledge of common cybersecurity frameworks and best practices
- Excellent written and verbal communication skills
- Strong problem-solving skills and ability to work in a fast-paced environment
- Willingness to work 24/7 NOC shifts, including rotating nights, weekends, holidays, and swing shifts
Nice to have
- Prior experience supporting federal government or DoD contracts
- Experience with security monitoring and log analysis tools (e.g., SIEM solutions)
- Familiarity with escalation procedures and ticketing systems
- Experience with Active Directory administration
Full description
Company Description
EvoTech, LLC is an Economically Disadvantaged Woman-Owned Small Business (EDWOSB) delivering program management, application development, cybersecurity, and IT solutions to federal government agencies and commercial clients. We are committed to advancing innovative technologies and fostering a culture of creativity. Guided by our vision to “Inspire the World, Create the Future,” we focus on building strategic partnerships and empowering great people.
Role Description
The Network Operations Center Analyst will support EvoTech’s Network operations by monitoring security events, performing incident analysis, and supporting Tier 1 and Tier 2 response activities. This role requires strong analytical skills, attention to detail, and the ability to follow established playbooks and escalation procedures to ensure timely and effective resolution of incidents. The Analyst will also support system administration tasks such as user access, account creation, log analysis, verification of security processes, and, working closely with end users, NOC/SOC teams and Field Service Representatives (FSRs). This is a full-time, on-site position based in San Antonio, Texas, requiring flexibility to work non-traditional hours, including nights, weekends, holidays, and swing shifts.
Responsibilities
- Monitor network events and analyze alerts to create incidents or dismiss false positives.
- Utilize ticketing system to track all incidents and actions to ensure proper metrics and remediation steps are recorded.
- Administer user system access and permissions; respond to password reset and account unlock requests.
- Troubleshoot straightforward system problems using appropriate tools, help desk instructions, SOPs, and problem solving skills.
- Monitor configuration and status of servers, operating systems, and applications.
- Assist with implementation of security patches and configuration changes (hardware and software).
- Monitor system security posture, respond to alarms, and support security incident response and reporting.
- Provide Tier 1 and Tier 2 support; coordinate with NOC and FSR teams to resolve and document incidents.
- Receive customer calls and emails, open and log trouble tickets, and lead Tier I & 2 troubleshooting using knowledge base resources.
- Assist customers that may not have much technical knowledge with issues related to applications, access or other technical issues.
- Open, update, and resolve incident tickets, update documentation, and escalate issues by defined policies and procedures.
- Support root cause analysis and corrective actions.
Requirements
- Associate’s degree in computer science, Information Technology, Cybersecurity, or a related field (or equivalent experience).