SecOps Analyst
Core
Validating AI-driven security investigations and owning confirmed incidents end-to-end from escalation to closure.
Role type
Senior SecOps Analyst (AI-driven SOC)
Builds
Incident response workflows and containment actions for cloud, product, and infrastructure environments.
Domain
Cybersecurity / Security Operations Center (SOC)
Deliverable
production ML models
Required skills
Incident response, threat hunting, log analysis (Splunk), MITRE ATT&CK, EDR, IdP, SASE/Firewalls, AI investigation validation, human-in-the-loop decision making
Preferred skills
Logz.io, ELK stack, SOAR, cloud-native threat investigation, GCIA, GCIH, CySA+
Technologies
Splunk, Logz.io, ELK, EDR, IdP, SASE, SOAR
Responsibilities
Review and validate findings from agentic AI SOC platform; Own confirmed incidents from escalation through containment and remediation; Investigate anomalies in application and product logs; Authorize containment actions on critical alerts; Hunt for threats including business-logic abuse and insider threats; Manage confirmed phishing cases end-to-end; Maintain investigation runbooks and case documentation; Serve as decision-maker for high-severity AI-escalated incidents during on-call rotation.
