Security Operations Center Analyst

Description

About Sygnia

Sygnia is a top-tier cyber technology and services company that partners with organizations around the world to proactively strengthen their cyber resilience and respond to advanced threats. We help companies prepare for and navigate cyber incidents with confidence, combining deep technical expertise with a business-driven mindset.

Our services include strategic cybersecurity consulting, incident response, proactive security assessments, and Managed Detection and Response (MDR). Sygnia works with leading global enterprises, including Fortune 100 companies, across industries such as finance, healthcare, technology, and critical infrastructure.

With a team composed of elite cybersecurity professionals from military and commercial backgrounds, Sygnia delivers precision, speed, and impact when it matters most.

The Role

Sygnia is looking for a Security Operations Center (SOC) Analyst to join our growing U.S. Managed Detection and Response team in Austin, Texas.

This is an exciting opportunity to help build Sygnia's first U.S. MDR site as we expand our global follow-the-sun operating model. You will work alongside experienced cybersecurity professionals to investigate security events, perform threat hunting, improve detection capabilities, and help protect some of the world's leading organizations.

As a SOC Analyst, you will leverage Sygnia's proprietary Velocity platform to monitor client environments, investigate alerts, and identify emerging threats. This is a hands-on technical role that combines security monitoring, incident investigation, detection engineering, and customer interaction.

This position is onsite in Austin five days per week and follows a rotating Sunday through Friday schedule to support global MDR operations.

What You'll Do

• Monitor client environments using Sygnia's proprietary Velocity platform to identify, investigate, and respond to security events.
• Perform in-depth alert triage, incident investigation, and threat analysis while meeting defined service level objectives.
• Conduct proactive threat hunting to identify malicious activity that may evade traditional detections.
• Differentiate legitimate security incidents from false positives and determine appropriate response actions.
• Develop and improve detection logic, correlation rules, and use cases to strengthen monitoring capabilities.
• Correlate data from multiple security technologies and log sources to identify complex attack activity.
• Work closely with clients by providing timely updates, incident reports, and actionable security recommendations.
• Collaborate with senior analysts and MDR leadership to maintain high investigation quality and continuously improve operational processes.
• Identify opportunities to automate workflows and improve the efficiency of MDR operations.
• Recommend improvements to client visibility, security monitoring, and overall security posture.

Requirements

What We're Looking For

• At least three years of experience in a SOC, MDR, Managed EDR, or security operations environment.
• Hands-on experience investigating security alerts and responding to security incidents.
• Strong analytical and problem-solving skills with the ability to work independently in a fast-paced environment.
• Understanding of modern cyber threats, attack techniques, and common attacker methodologies.
• Experience working with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, ArcSight, Exabeam, or similar technologies.
• Familiarity with common enterprise security technologies including EDR, firewalls, Windows Event Logs, identity platforms, and network security controls.
• Strong understanding of networking fundamentals, operating systems, and enterprise security architecture.
• Basic knowledge of host-based forensics, operating system artifacts, and security event analysis.
• Experience with scripting or automation using Python or similar languages.
• Ability to communicate effectively with both technical teammates and customers.
• Willingness to work an onsite rotating schedule in Austin, including Sunday through Friday coverage as part of Sygnia's follow-the-sun MDR model.

Bonus Points For

• Experience with cloud platforms such as AWS, Azure, or Google Cloud Platform.
• Experience with detection engineering or SIEM content development.
• Familiarity with digital forensics, malware analysis, or incident response.
• Experience working within an MSSP or MDR provider.

Why Sygnia

• Help build Sygnia's first U.S. MDR site and play a foundational role in its long-term success.
• Investigate sophisticated cyber threats affecting some of the world's leading organizations.
• Work alongside experienced incident responders, threat hunters, and cybersecurity experts.
• Gain exposure to a wide variety of enterprise environments, industries, and attack scenarios.
• Contribute to the evolution of Sygnia's proprietary Velocity platform and MDR capabilities.
• Join a collaborative team that values technical excellence, continuous learning, and innovation.
• Grow your career with opportunities to expand into advanced monitoring, incident response, threat hunting, and leadership roles.