Security Operations / Detection Engineering analyst.

Assyst is seeking an experienced Network Security Analyst II to support the client’s enterprise security operations. The role is responsible for monitoring, detecting, investigating, and responding to security events across network, endpoint, cloud, and on-premises environments.

The ideal candidate will have strong hands-on experience with SIEM, SOAR, EDR/XDR, NDR, threat intelligence, detection engineering, and incident response, with the ability to independently analyze complex security events and recommend appropriate mitigation actions.

Roles & Responsibilities:

• Monitor and analyze security alerts, logs, network traffic, endpoint telemetry, and threat intelligence feeds.
• Perform incident triage, investigation, escalation, containment, and documentation.
• Investigate suspicious activity, malware indicators, anomalous network behavior, and security breaches.
• Develop and tune SIEM detection rules, alerts, dashboards, queries, and playbooks.
• Conduct threat hunting using KQL, SPL, packet/session analysis, and endpoint telemetry.
• Support vulnerability, risk, and security control assessments.
• Analyze and correlate security events across network, endpoint, identity, and cloud environments.
• Work with network, infrastructure,