Associate Cyber Operations Analyst – SOC Threat Management

Accountabilities:

• Monitor and detect threats: Support 24x7 SOC operations by monitoring security events, identifying suspicious activity, and detecting advanced cyber threats across enterprise environments.
• Analyze security incidents: Review SIEM alerts, incident reporting systems, mailboxes, and other sources to identify potential incidents and determine their scope, severity, and impact.
• Correlate security data: Analyze and correlate information from multiple sources to assess threats affecting critical systems, applications, networks, and datasets.
• Support incident response: Execute established operational procedures for security incidents, identify potential mitigating controls, and escalate complex cases for deeper investigation.
• Apply threat intelligence: Analyze current threat intelligence, adversary activity, and emerging vulnerabilities to assess organizational risk and improve defensive measures.
• Perform intrusion analysis: Apply knowledge of network attacks, intrusion methodologies, IDS/IPS technologies, and threat detection techniques to investigate suspicious activity.
• Leverage AI and automation: Use AI/ML capabilities to identify anomalies, automate alert triage, enhance threat intelligence, and improve the efficiency and effectiveness of SOC operations.
• Collaborate across the SOC: Work closely with Threat Management colleagues and other security professionals to investigate incidents, communicate findings, and coordinate response activities.
• Maintain technical awareness: Stay current with cybersecurity trends, threat actors, attack techniques, cloud security developments, and emerging AI/ML applications relevant to security operations.
• Contribute to continuous improvement: Identify opportunities to improve detection processes, automation, analytical methods, and overall SOC effectiveness.

Requirements

• Experience: At least 1 year of direct experience in cybersecurity, IT security, SOC operations, or cyber incident analysis with a relevant bachelor’s degree, or 5+ years of cybersecurity, IT, and SOC analysis/operations experience.
• SOC expertise: Practical understanding of security monitoring, incident management, threat detection, and cyber analysis within an operational security environment.
• AI/ML knowledge: Familiarity with artificial intelligence and machine learning concepts and their application to anomaly detection, behavioral analysis, threat intelligence, and SOC automation.
• Network security: Strong understanding of TCP/IP, Boolean logic, network-level exploits, network traffic analysis, IDS/IPS architectures, and security detection methodologies.
• Security platforms: Hands-on experience with SIEM/SOAR platforms and cybersecurity automation technologies.
• Cloud security: Familiarity with security principles, risk management, control frameworks, and cloud environments such as AWS, Azure, or GCP.
• Threat intelligence: Ability to interpret threat intelligence and apply knowledge of threat actors, attack techniques, and intrusion methodologies to security investigations.
• Data and analytical skills: Ability to analyze security data and, ideally, apply feature engineering or ML techniques to security models and behavioral detection.
• Communication: Excellent written and verbal communication, organization, collaboration, and interpersonal skills, with the ability to clearly communicate findings and escalate incidents appropriately.
• Education: Bachelor’s degree in Computer Science, Information Technology, cybersecurity, or a related field is preferred, or equivalent professional experience.
• Certifications: Security certifications such as CompTIA Security+, CEH, GCED, GCIA, GCDA, GCIH, GDAT, GSOC, or CISSP are desirable.
• Security eligibility: U.S. citizenship is required, along with the ability to obtain and maintain Public Trust security vetting.
• Work arrangement: Ability to work remotely in a shift-based environment supporting 24x7 SOC operations.

Benefits

• Remote work: Fully remote position with telework eligibility and no regular travel requirement.
• Healthcare: Medical, dental, and vision insurance.
• Insurance protection: Life insurance plus short-term and long-term disability coverage.
• Retirement: 401(k) retirement savings plan with company matching.
• Time off: Paid time off and paid holidays.
• Professional development: Tuition assistance and support for ongoing professional development.
• Mission-driven environment: Opportunity to work on cybersecurity operations supporting critical federal missions and complex security environments.
• Technical growth: Exposure to modern SIEM/SOAR, AI/ML, cloud security, threat intelligence, and advanced cyber defense technologies.