Security Operations Analyst Jobs in Texas
Security Operations Analyst jobs in Texas are among the most active in the country, concentrated in defense contracting, financial services, energy, and healthcare sectors across seniority levels from entry-level SOC tier-one analysts through senior threat-intelligence leads. The largest hiring volumes are in Dallas, Houston, and San Antonio, where employers such as AT&T, USAA, and Raytheon Technologies maintain significant cybersecurity operations. Incident response, SIEM administration, and cloud security monitoring are the most in-demand specialties across Texas postings. Find a role that fits below and apply directly.
Find JobsOverview
Showing 4 of 12+ Security Operations Analyst jobs
Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.
Job Overview
As a Senior SecOps Analyst at Saronic, you'll be on the front line of our detection and response operations, triaging and investigating security alerts across endpoint, cloud, identity, network, and SaaS telemetry using our SIEM and XDR platforms. You'll run root cause analysis on real events, lead initial response for mid-tier incidents (contain, eradicate, recover), and tune detections to cut down on noise and sharpen what actually matters. Beyond the day-to-day, you'll join the on-call rotation, run targeted threat hunts to catch what automation misses, help build out our playbooks and runbooks, and contribute to post-incident reviews that turn gaps into real improvements. This is an early, formative role on a SecOps team being built from the ground up, so you'll have a direct hand in shaping how we operate, with room to grow across security domains rather than being boxed into one lane.
Responsibilities
Detection & Alert Operations
Monitor and triage security alerts across endpoint, cloud, identity, network, and SaaS telemetry using enterprise SIEM and XDR platforms
Perform in-depth alert investigation and root cause analysis, documenting findings with clear, structured timelines and impact assessments
Tune detections to reduce false positive noise and improve signal fidelity; contribute to detection-as-code pipelines using structured query languages
Operate across multiple detection and visibility platforms as part of a maturing, layered security monitoring ecosystem
Incident Response & Investigation
Lead initial incident response for mid-tier events: contain, eradicate, and recover across endpoint, cloud, and identity domains
Participate in the on-call incident rotation and effectively communicate status and findings to the SecOps Lead and relevant stakeholders
Conduct post-incident reviews, identifying gaps in detection, response, and containment and translating them into actionable improvements
Coordinate with Security Engineering and IT during active incidents to accelerate response and reduce dwell time
SecOps Foundation & Enablement
Support the SecOps Lead in developing and refining response playbooks, runbooks, and analyst workflow documentation
Conduct targeted threat hunting operations to identify attacker activity not surfaced by automated detections
Contribute to SecOps metrics tracking, reporting, and operational readiness reviews
Help onboard and mentor junior analysts as the team grows, serving as a technical resource and process guide
Qualifications
3+ years of hands-on experience in a Security Operations, detection engineering, or incident response role
Demonstrated experience triaging and investigating alerts across at least two of the following: endpoint, cloud, identity, network, or SaaS environments
Hands-on proficiency with enterprise SIEM platforms and their query languages; ability to write and iterate on detection logic from scratch
Experience with EDR tooling in an operational context; ability to hunt, triage, and respond using endpoint telemetry
Solid understanding of attacker TTPs mapped to MITRE ATT&CK, and the ability to apply that knowledge during active investigations
Experience writing or iterating on detection logic, response playbooks, or SOC operational documentation
Scripting proficiency in Python, PowerShell, or Bash for alert enrichment, automation, or triage support
Strong understanding of network fundamentals: TCP/IP, DNS, HTTP/S, firewall and proxy logs, and lateral movement patterns
Clear and structured written and verbal communication — you can brief a non-technical stakeholder and write a thorough incident report
Ownership mindset: you follow incidents through to closure and flag what needs to be fixed, not just what needs to be documented
Security Clearance eligible
Preferred Qualifications
Experience with XDR platforms and cross-domain correlated detection across endpoint, identity, and cloud
Familiarity with cloud-native security operations and log sources in AWS or Azure environments
Experience with SOAR platforms or building response automation workflows
Exposure to supply chain and CI/CD pipeline security monitoring
Familiarity with data lake-based or pipeline-driven detection architectures
Experience operating in or supporting classified, GovCloud, or FedRAMP environments
Background in defense, aerospace, robotics, or other high-assurance operational environments
Familiarity with compliance frameworks such as NIST SP 800-171, NIST SP 800-53, or CMMC
Relevant certifications: GIAC GCIH, GCIA, GCFE, BTL1/2, CySA+, OSCP, or equivalent
Active security clearance or prior clearance history is a strong differentiator
Physical Demands
Prolonged periods of sitting at a desk and working on a computer
Occasional standing and walking within the office
Manual dexterity to operate a computer keyboard, mouse, and other office equipment
Visual acuity to read screens, documents, and reports
Occasional reaching, bending, or stooping to access file drawers, cabinets, or office supplies
Lifting and carrying items up to 20 pounds occasionally (e.g., office supplies, packages)
Benefits
Medical Insurance: Comprehensive health insurance plans covering a range of services
Saronic pays 100% of the premium for employees and 80% for dependents
Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care
Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents
Time Off: Generous PTO and Holidays
Parental Leave: Paid maternity and paternity leave to support new parents
Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses
Retirement Plan: 401(k) plan with company match
Stock Options: Equity options to give employees a stake in the company’s success
Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage
Pet Insurance: Discounted pet insurance options including 24/7 Telehealth helpline
Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office
Saronic CCPA Notice for Candidates and California Employees
If this role is based in the United States, it requires access to export-controlled information or items that require “U.S. Person” status. As defined by U.S. law, individuals who are any one of the following are considered to be a “U.S. Person”: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3).
Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits. We are also committed to providing reasonable accommodations for qualified individuals with disabilities.
Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.
Job Overview
As a Senior SecOps Analyst at Saronic, you'll be on the front line of our detection and response operations, triaging and investigating security alerts across endpoint, cloud, identity, network, and SaaS telemetry using our SIEM and XDR platforms. You'll run root cause analysis on real events, lead initial response for mid-tier incidents (contain, eradicate, recover), and tune detections to cut down on noise and sharpen what actually matters. Beyond the day-to-day, you'll join the on-call rotation, run targeted threat hunts to catch what automation misses, help build out our playbooks and runbooks, and contribute to post-incident reviews that turn gaps into real improvements. This is an early, formative role on a SecOps team being built from the ground up, so you'll have a direct hand in shaping how we operate, with room to grow across security domains rather than being boxed into one lane.
Responsibilities
Detection & Alert Operations
Monitor and triage security alerts across endpoint, cloud, identity, network, and SaaS telemetry using enterprise SIEM and XDR platforms
Perform in-depth alert investigation and root cause analysis, documenting findings with clear, structured timelines and impact assessments
Tune detections to reduce false positive noise and improve signal fidelity; contribute to detection-as-code pipelines using structured query languages
Operate across multiple detection and visibility platforms as part of a maturing, layered security monitoring ecosystem
Incident Response & Investigation
Lead initial incident response for mid-tier events: contain, eradicate, and recover across endpoint, cloud, and identity domains
Participate in the on-call incident rotation and effectively communicate status and findings to the SecOps Lead and relevant stakeholders
Conduct post-incident reviews, identifying gaps in detection, response, and containment and translating them into actionable improvements
Coordinate with Security Engineering and IT during active incidents to accelerate response and reduce dwell time
SecOps Foundation & Enablement
Support the SecOps Lead in developing and refining response playbooks, runbooks, and analyst workflow documentation
Conduct targeted threat hunting operations to identify attacker activity not surfaced by automated detections
Contribute to SecOps metrics tracking, reporting, and operational readiness reviews
Help onboard and mentor junior analysts as the team grows, serving as a technical resource and process guide
Qualifications
3+ years of hands-on experience in a Security Operations, detection engineering, or incident response role
Demonstrated experience triaging and investigating alerts across at least two of the following: endpoint, cloud, identity, network, or SaaS environments
Hands-on proficiency with enterprise SIEM platforms and their query languages; ability to write and iterate on detection logic from scratch
Experience with EDR tooling in an operational context; ability to hunt, triage, and respond using endpoint telemetry
Solid understanding of attacker TTPs mapped to MITRE ATT&CK, and the ability to apply that knowledge during active investigations
Experience writing or iterating on detection logic, response playbooks, or SOC operational documentation
Scripting proficiency in Python, PowerShell, or Bash for alert enrichment, automation, or triage support
Strong understanding of network fundamentals: TCP/IP, DNS, HTTP/S, firewall and proxy logs, and lateral movement patterns
Clear and structured written and verbal communication — you can brief a non-technical stakeholder and write a thorough incident report
Ownership mindset: you follow incidents through to closure and flag what needs to be fixed, not just what needs to be documented
Security Clearance eligible
Preferred Qualifications
Experience with XDR platforms and cross-domain correlated detection across endpoint, identity, and cloud
Familiarity with cloud-native security operations and log sources in AWS or Azure environments
Experience with SOAR platforms or building response automation workflows
Exposure to supply chain and CI/CD pipeline security monitoring
Familiarity with data lake-based or pipeline-driven detection architectures
Experience operating in or supporting classified, GovCloud, or FedRAMP environments
Background in defense, aerospace, robotics, or other high-assurance operational environments
Familiarity with compliance frameworks such as NIST SP 800-171, NIST SP 800-53, or CMMC
Relevant certifications: GIAC GCIH, GCIA, GCFE, BTL1/2, CySA+, OSCP, or equivalent
Active security clearance or prior clearance history is a strong differentiator
Physical Demands
Prolonged periods of sitting at a desk and working on a computer
Occasional standing and walking within the office
Manual dexterity to operate a computer keyboard, mouse, and other office equipment
Visual acuity to read screens, documents, and reports
Occasional reaching, bending, or stooping to access file drawers, cabinets, or office supplies
Lifting and carrying items up to 20 pounds occasionally (e.g., office supplies, packages)
Benefits
Medical Insurance: Comprehensive health insurance plans covering a range of services
Saronic pays 100% of the premium for employees and 80% for dependents
Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care
Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents
Time Off: Generous PTO and Holidays
Parental Leave: Paid maternity and paternity leave to support new parents
Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses
Retirement Plan: 401(k) plan with company match
Stock Options: Equity options to give employees a stake in the company’s success
Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage
Pet Insurance: Discounted pet insurance options including 24/7 Telehealth helpline
Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office
Saronic CCPA Notice for Candidates and California Employees
If this role is based in the United States, it requires access to export-controlled information or items that require “U.S. Person” status. As defined by U.S. law, individuals who are any one of the following are considered to be a “U.S. Person”: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3).
Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits. We are also committed to providing reasonable accommodations for qualified individuals with disabilities.
See All 12 Security Operations Analyst Jobs in Texas
Find roles in Texas that match your experience and apply in just a few clicks.
Find JobsSecurity Operations Analyst Jobs by City in Texas
Where Texas roles are concentrated, by current openings.
Security Operations Analyst Job Market in Texas
A snapshot from current Texas openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Food & Beverage
- Technology & Software
- Distribution & Wholesale
What Texas Employers Look For
The qualifications that appear most often in security operations analyst jobs across Texas.
- One or more certifications such as CompTIA Security+, CEH, or CISSP recognized in Texas hiring
- Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, or IBM QRadar
- Ability to obtain or maintain a federal security clearance for defense and government contractor roles
- Bachelor's degree in cybersecurity, information technology, computer science, or a related field
- Demonstrated experience monitoring, triaging, and escalating security events in a SOC environment
- Familiarity with NIST, MITRE ATT&CK frameworks and Texas-sector compliance such as NERC CIP
Security Operations Analyst Jobs in Texas: Frequently Asked Questions
How do you become a security operations analyst in Texas?
Texas does not require a state-issued license to work as a security operations analyst, so the path runs through education and industry certification. Most employers expect at least an associate or bachelor's degree in cybersecurity or information technology, combined with a vendor-neutral credential such as CompTIA Security+ or CySA+. Gaining hands-on experience through a junior SOC role, a helpdesk position, or a cybersecurity internship at one of Texas's large defense contractors or financial institutions is the most common bridge to a full analyst role.
How much do security operations analysts make in Texas?
Security operations analysts in Texas earn a median of about $129,890 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $77,990 for the lowest 10% to over $178,550 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire security operations analysts in Texas?
Employers hiring security operations analysts in Texas right now include CENCORE, CEVA Logistics, and Saronic Technologies, based on current listings on Migrate Mate as of August 2026. Texas's dense mix of defense contractors, regional banks, energy companies, and large health systems means consistent demand across both the public and private sectors.
Which Texas cities have the most security operations analyst jobs?
Houston, San Antonio, and Austin account for the largest share of security operations analyst openings in Texas. Dallas leads because of its concentration of financial services firms, corporate headquarters, and managed security service providers, while San Antonio's strong defense and military installation base, including Joint Base San Antonio, drives steady government and contractor demand.
Are there remote security operations analyst jobs in Texas?
Yes, and more than most fields. About 25% of security operations analyst openings tied to Texas are remote or hybrid as of August 2026, reflecting the analytical and desk-based nature of most SOC work. Threat intelligence, log analysis, and compliance monitoring roles tend to offer the most location flexibility, while roles requiring on-site access to classified systems or physical infrastructure remain largely on-site.
How can I get hired as a security operations analyst in Texas with little or no experience?
The most realistic entry path is a tier-one SOC analyst or junior security analyst role, which Texas-based managed security service providers and large employers such as AT&T and USAA regularly post for candidates without extensive experience. A CompTIA Security+ certification combined with a home lab portfolio or a community college cybersecurity program gives candidates a concrete edge. Helpdesk support, IT generalist, and network technician roles at Texas companies are common lateral moves that lead into SOC positions within one to two years.
Where can I find and apply to security operations analyst jobs in Texas?
You can find and apply to security operations analyst jobs in Texas on Migrate Mate, which lists current Texas openings updated regularly. Find the roles that fit your experience and location, then apply directly through each listing.
See All 12 Security Operations Analyst Jobs in Texas
Find roles in Texas that match your experience and apply in just a few clicks.
Find Jobs