Associate Cyber Operations Analyst – SOC Threat Management

This is a fully remote position, open to applicants in United States.

📋 Description

• Provide 24x7 monitoring, detection, and management of advanced cyber threats.

• Implement operational processes that support response efforts for identified security incidents.

• Analyze SIEM outputs, incident reporting platforms, mailboxes, and phone calls to pinpoint potential security incidents.

• Integrate data from various sources to assess incidents and evaluate their impact on critical systems or datasets.

• Detect security issues that may necessitate the implementation of mitigating controls.

• Evaluate threat intelligence to gauge risk and enhance defensive strategies.

• Offer subject matter expertise on network-based attacks, intrusion methodologies, and threat management practices.

• Elevate complex incidents for deeper investigation and work in collaboration with Threat Management team members.

• Leverage AI/ML-based tools to identify anomalies, automate triage processes, and enhance threat intelligence.

• Keep abreast of the latest trends in cybersecurity, threat actors, and advancements in AI/ML relevant to SOC operations.

⛳️ Requirements

• Minimum of 1 year of experience in IT and/or SOC operations.

• BA/BS in Computer Science, IT, or a related field, or equivalent experience.

• Alternatively, 5+ years of experience in cybersecurity along with IT and SOC analysis & operations.

• U.S. Citizenship is mandatory.

• Capability to obtain Public Trust clearance.

• Knowledge of Artificial Intelligence / Machine Learning (AI/ML) capabilities and their use in cyber analysis and SOC operations.

• Proficient in network traffic analysis and threat detection techniques.

• Solid understanding of Boolean logic, TCP/IP fundamentals, network-level vulnerabilities, and IDS/IPS technologies.

• Familiarity with control frameworks, risk management strategies, and cloud security (AWS, Azure, GCP).

• Practical experience with cybersecurity automation and SIEM/SOAR platforms.

• Skilled in ML frameworks for detecting anomalies, threat intelligence, and behavioral analysis.

• Exceptional communication, organizational, and interpersonal skills.

• Preferred experience with Splunk, ProofPoint, Cisco FirePower, SentinelOne, and the Microsoft Defender suite.

• Preferred knowledge of IDS/IPS architectures, signature development, and anomaly-based detection.

• Preferred skills in data analysis and feature engineering for ML-based security models.

• Preferred direct experience with AI/ML applications in SOC environments, including automated threat detection and predictive analytics.

• Desired certifications include CompTIA Security+, CEH, GCED, GCIA, GCDA, GCIH, GDAT, GSOC, and CISSP.

• Must be available to support shift-based 24x7 operations.

• Must reside in the United States.

🏝️ Benefits

• Medical Insurance

• Dental Insurance

• Vision Insurance

• Life Insurance

• Short Term & Long Term Disability

• 401k Retirement Savings Plan with Company Match

• Paid Holidays

• Paid Time Off (PTO)

• Tuition and Professional Development Assistance

• Remote work flexibility