Security Operations Analyst

Position Summary

The Security Operations Analyst supports the detection, investigation, response, and continuous improvement of cybersecurity capabilities across enterprise environments. The role monitors security events, conducts initial investigations, supports incident response, contributes to detection and security engineering, and helps develop operational efficiencies through automation and AI-assisted processes.

The ideal candidate is analytical, technically curious, process-oriented, and eager to develop practical cybersecurity and AI-enabled operations expertise. This individual uses approved AI tools as an analyst accelerator, validates generated outputs, documents assumptions, and escalates decisions or risks that require senior review.

Ideal Candidate Profile

The ideal candidate demonstrates sound judgment, attention to detail, a learning mindset, and ownership of assigned work. They can follow established procedures, communicate findings clearly, experiment responsibly with automation and AI, and contribute to tuning AI agents and advancing AI SOC initiatives under the guidance of senior analysts and engineering teams.

- 1-3 years of experience in Security Operations, Incident Response, IT Operations, Security Engineering, or a related cybersecurity environment.

- Experience monitoring, triaging, investigating, and escalating security events using established operational processes.

- Experience supporting incident response and documenting investigations through closure.

- Ability to work independently on assigned tasks while collaborating effectively within a team and escalating when appropriate.

- Foundational understanding of security operations, threat detection, incident response, security engineering, and responsible use of automation or AI.

- Working knowledge of networking, authentication, operating systems, cloud technologies, and enterprise security controls.

- Familiarity with Windows, Linux/Unix, macOS, and cloud computing platforms.

- Experience with technologies such as SIEM, EDR, IDS/IPS, DLP, SOAR, email security, IAM, vulnerability management, and log analysis platforms.

- Understanding of indicators of compromise, attack methodologies, detection logic, and basic malware concepts.

- Strong analytical, problem-solving, communication, collaboration, prioritization, and documentation skills.

- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent practical experience.