Associate Cyber Operations Analyst – SOC Threat Management

Accountabilities:

• • Monitor and detect threats: Support 24x7 SOC operations by monitoring security events, identifying suspicious activity, and detecting advanced cyber threats across enterprise environments.
  • Analyze security incidents: Review SIEM alerts, incident reporting systems, mailboxes, and other sources to identify potential incidents and determine their scope, severity, and impact.
  • Correlate security data: Analyze and correlate information from multiple sources to assess threats affecting critical systems, applications, networks, and datasets.
  • Support incident response: Execute established operational procedures for security incidents, identify potential mitigating controls, and escalate complex cases for deeper investigation.
  • Apply threat intelligence: Analyze current threat intelligence, adversary activity, and emerging vulnerabilities to assess organizational risk and improve defensive measures.
  • Perform intrusion analysis: Apply knowledge of network attacks, intrusion methodologies, IDS/IPS technologies, and threat detection techniques to investigate suspicious activity.
  • Leverage AI and automation: Use AI/ML capabilities to identify anomalies, automate alert triage, enhance threat intelligence, and improve the efficiency and effectiveness of SOC operations.
  • Collaborate across the SOC: Work closely with Threat Management colleagues and other security professionals to investigate incidents, communicate findings, and coordinate response activities.
  • Maintain technical awareness: Stay current with cybersecurity trends, threat actors, attack techniques, cloud security developments, and emerging AI/ML applications relevant to security operations.
  • Contribute to continuous improvement: Identify opportunities to improve detection processes, automation, analytical methods, and overall SOC effectiveness.

  Requirements

  • Experience: At least 1 year of direct experience in cybersecurity, IT security, SOC operations, or cyber incident analysis with a relevant bachelor’s degree, or 5+ years of cybersecurity, IT, and SOC analysis/operations experience.
  • SOC expertise: Practical understanding of security monitoring, incident management, threat detection, and cyber analysis within an operational security environment.
  • AI/ML knowledge: Familiarity with artificial intelligence and machine learning concepts and their application to anomaly detection, behavioral analysis, threat intelligence, and SOC automation.
  • Network security: Strong understanding of TCP/IP, Boolean logic, network-level exploits, network traffic analysis, IDS/IPS architectures, and security detection methodologies.
  • Security platforms: Hands-on experience with SIEM/SOAR platforms and cybersecurity automation technologies.
  • Cloud security: Familiarity with security principles, risk management, control frameworks, and cloud environments such as AWS, Azure, or GCP.
  • Threat intelligence: Ability to interpret threat intelligence and apply knowledge of threat actors, attack techniques, and intrusion methodologies to security investigations.
  • Data and analytical skills: Ability to analyze security data and, ideally, apply feature engineering or ML techniques to security models and behavioral detection.
  • Communication: Excellent written and verbal communication, organization, collaboration, and interpersonal skills, with the ability to clearly communicate findings and escalate incidents appropriately.
  • Education: Bachelor’s degree in Computer Science, Information Technology, cybersecurity, or a related field is preferred, or equivalent professional experience.
  • Certifications: Security certifications such as CompTIA Security+, CEH, GCED, GCIA, GCDA, GCIH, GDAT, GSOC, or CISSP are desirable.
  • Security eligibility: U.S. citizenship is required, along with the ability to obtain and maintain Public Trust security vetting.
  • Work arrangement: Ability to work remotely in a shift-based environment supporting 24x7 SOC operations.

  Benefits

  • Remote work: Fully remote position with telework eligibility and no regular travel requirement.
  • Healthcare: Medical, dental, and vision insurance.
  • Insurance protection: Life insurance plus short-term and long-term disability coverage.
  • Retirement: 401(k) retirement savings plan with company matching.
  • Time off: Paid time off and paid holidays.
  • Professional development: Tuition assistance and support for ongoing professional development.
  • Mission-driven environment: Opportunity to work on cybersecurity operations supporting critical federal missions and complex security environments.
  • Technical growth: Exposure to modern SIEM/SOAR, AI/ML, cloud security, threat intelligence, and advanced cyber defense technologies.