Senior Cyber Defense Operations Analyst
Core
Lead investigations and incident response for security alerts across cloud, corporate, endpoint, identity, and production environments while automating SOC workflows.
Role type
Senior IC security operations analyst (incident response & detection)
Builds
Automated, AI-assisted security workflows and detection logic
Domain
Cybersecurity / Cloud Security / Threat Intelligence
Deliverable
production ML models
Required skills
SIEM/EDR platform expertise, cloud security (AWS/GCP), threat detection frameworks (MITRE ATT&CK), scripting/automation (Python), incident triage, playbook development
Preferred skills
SOAR experience, AI/ML application in security, security engineering partnership
Technologies
Splunk, Google SecOps, CrowdStrike NGSIEM, AWS, GCP, Python, SOAR
Responsibilities
Lead triage, investigation, and response for security alerts; coordinate incident response with engineering and legal; develop and tune detection logic; automate analyst work with AI agents; create playbooks and operational metrics; coach analysts and manage SLAs
Seniority
Senior, hands-on IC
