Security Operations Analyst
Core
Detect, investigate, and respond to cybersecurity threats and incidents across systems, networks, cloud, and applications to protect enterprise assets.
Role type
Senior Security Operations Analyst (Incident Response & Threat Management)
Builds
Incident response playbooks, threat detection capabilities, vulnerability remediation plans, and security metrics dashboards.
Domain
Cybersecurity / Information Security
Required skills
Incident response coordination, threat hunting, vulnerability management, SIEM/EDR/XDR operations, root cause analysis, security architecture review, risk assessment, security standards development, stakeholder communication, automation scripting
Preferred skills
CISSP/GCIH/GCFA/CISA/CEH/OSCP/Security+ certifications, Python/PowerShell automation, SOAR solution design, digital forensics, cloud-native security, AI/ML in security operations
Technologies
SIEM, EDR/XDR, SOAR, Python, PowerShell, cloud platforms, identity and access management tools
Responsibilities
Monitor security events and alerts to identify malicious activity; investigate cybersecurity incidents including malware and phishing; coordinate incident response across technical and business teams; execute containment, eradication, and recovery activities; conduct threat hunting using telemetry and intelligence; manage vulnerability assessments and remediation; develop operational metrics and dashboards for risk-informed decision-making; contribute to security standards, policies, and playbooks.
Seniority
Senior, hands-on IC with strategic collaboration
