Security Operations Analyst
Core
Detect, investigate, and respond to cybersecurity threats and incidents across systems, networks, cloud, and applications to protect enterprise assets.
Role type
Senior Security Operations Analyst (Incident Response & Threat Management)
Builds
Incident response playbooks, threat detection capabilities, vulnerability remediation plans, and security metrics dashboards
Domain
Cybersecurity / Information Security
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
Incident response coordination, threat hunting, vulnerability management, SIEM/EDR/XDR operations, root cause analysis, security standards development, risk assessment, stakeholder communication, automation scripting
Preferred skills
SOAR solution design, digital forensics, cloud-native security, AI/ML in security operations, Python/PowerShell automation, business intelligence tools
Technologies
SIEM, EDR/XDR, SOAR, Python, PowerShell, cloud platforms, identity and access management
Responsibilities
Monitor security events and alerts to identify malicious activity; investigate incidents including malware, phishing, and unauthorized access; execute containment, eradication, and recovery activities; conduct threat hunting using telemetry and intelligence; manage vulnerability assessments and remediation; develop operational metrics and reporting; support security architecture reviews and policy development.
Seniority
Senior, hands-on IC with strategic collaboration