Analyst, Cybersecurity Operations
About The Position
The Cybersecurity Operations Analyst is a member of the IT Security & Compliance team responsible for monitoring, triaging, and responding to security events across the organization’s hybrid on‑premises and cloud environments. This role focuses on detection, analysis, and incident response, while supporting continuous improvement of SOC processes and security monitoring capabilities. The Cybersecurity Operations Analyst works closely with IT, Cloud, and Security teams to ensure timely detection and response to security threats, accurate documentation of incidents, and clear communication of security risk and operational status.
Requirements
- 3+ years of experience in a relevant information security role
- 1-2 years of experience in network, server, or endpoint/workstation administration
- Experience operating in a hybrid IT environment with on‑premises and cloud infrastructure
- Security event monitoring, alert triage, and incident response
- Log analysis and development of correlation and alerting rules
- Endpoint Detection and Response (EDR) technologies
- Intrusion detection and network security monitoring
- Understanding of hybrid identity architectures
- Cloud Detection and Response (CDR) concepts and workflows
- Strong written and verbal communication skills
- Analytical thinking, troubleshooting, and problem‑solving abilities
- Ability to work collaboratively in a team‑based environment
Nice To Haves
- College degree or technical school training preferred
- Security‑related certifications preferred (e.g., CompTIA Security+, GIAC)
- Active participation in professional security organizations preferred (e.g., ISSA, ISACA, InfraGard, ISAC/ISAOs)
Responsibilities
- Monitor and analyze security alerts from SIEM, EDR, NDR, and cloud‑native security platforms
- Perform independent event triage, validation, and incident identification
- Execute incident response actions as necessary
- Monitor and respond to security events across hybrid environments, including on‑premises infrastructure and cloud platforms
- Support Cloud Detection and Response (CDR) activities by reviewing cloud security alerts and audit logs
- Contribute to improvements in enterprise‑wide security log collection, normalization, correlation, and alert quality
- Collaborate with the Security team to improve and automate SOC processes and workflows
- Document incidents, investigations, response actions, and operational procedures
- Assist with producing operational metrics and reports to communicate security posture and trends to leadership
- Remain current on emerging threats, attacker techniques, and defensive practices relevant to hybrid enterprise environments
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
Associate degree
