Security Operations Analyst
Core
Security Operations Analyst responsible for monitoring, investigating, and responding to security events across multi-cloud environments, leading incident response, and governing non-human identities and AI/agent connections.
Role type
Senior IC Security Operations Analyst
Builds
Security operations projects, automation frameworks, SOAR playbooks, and threat detection mechanisms
Domain
Cybersecurity, Cloud Security (AWS, GCP), AI Security
Required skills
Incident response, Security monitoring, Cloud security fundamentals, Python scripting, Linux environments, SIEM/EDR/SOAR/DLP tools, Threat hunting, Non-human identity governance, AI security risk assessment
Preferred skills
Log analysis, Digital forensics, Vulnerability management, CI/CD security, Security frameworks (NIST, SOC 2), Identity and access management, Mentoring
Technologies
AWS, GCP, Python, Linux, SIEM, EDR, SOAR, DLP, AWS GuardDuty, GCP Security Command Center, Nightfall, Claude Code, MCP tools
Responsibilities
Own end-to-end security operations projects; Lead and participate in incident response triage and post-mortems; Monitor and tune security alerts; Build Python-based automation and SOAR playbooks; Hunt for threats across cloud and corporate environments; Govern non-human identities and AI/agent connections; Use AI-assisted tooling for security tasks; Mentor newer teammates
Seniority
Senior, hands-on IC
