Cybersecurity Operations Analyst

PIMCO • Austin, TX

5d • Onsite

About The Position

PIMCO's Cybersecurity organization is seeking an entry-level Graduate Analyst to support the Cyber Incident Response Team and Security Operations Center (SOC) in Austin, Texas. The role provides hands-on exposure to threat detection, incident response, enterprise security tooling, and a range of SOC workflows, including event monitoring, correlation, and behavioral analysis. Analysts use AI models and tools as a core part of investigations, learning, and response work, with the aim of developing technical depth and progressively taking greater ownership of the incident lifecycle.

The analyst will assess evidence, triage alerts, and escalate significant events to Engineers and Incident Responders. They will also support phishing response, communicate with staff about cybersecurity issues and hygiene, maintain operational documentation, and contribute to post-incident learning. This position is part of a structured graduate development track; analysts are expected to progress toward greater autonomy within 6–12 months and specialization within 12–18 months.

PIMCO describes a collaborative, inclusive engineering culture that values continuous learning, career mobility, knowledge sharing, and technology pro bono opportunities. The company offers education reimbursement and ongoing training in technology, communication, and diversity and inclusion. Compensation includes a base salary and a discretionary bonus. The stated base salary range is $90,000–$100,000.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.
• Excellent written and verbal communication skills, including the ability to explain technical issues to non-technical stakeholders.
• Strong organizational skills and self-sufficiency, with the ability to operate with minimal supervision during active events.
• Working knowledge of core cybersecurity toolsets: Endpoint Detection & Response (EDR), Email Security Gateway, SIEM, Vulnerability Management, Identity & Access Management, and Cloud Access Security Broker (CASB).
• Enthusiasm for using AI tools such as LLM-based assistants and AI-driven investigation platforms as a core part of daily work, with comfort experimenting with and quickly adopting new tools.
• Ability to identify manual, repetitive work and inclination to automate it rather than treat it as routine toil.
• Ability to remain composed and effective under pressure in a fast-paced, time-sensitive environment.
• Strong attention to detail, analytical mindset, and demonstrated problem-solving ability.
• Genuine interest in cybersecurity trends and commitment to continuous learning.

Nice To Haves

• CompTIA Security+ or CySA+ certification.
• (ISC)² SSCP or CCSP certification.
• GIAC GSEC, GISF, or GCIH certification.
• Cloud vendor security fundamentals certification, such as Microsoft SC-900 or AWS Security Fundamentals.
• Prior hands-on experience with AI/LLM tools such as Claude, ChatGPT, or Copilot for research, writing, or automation.

Responsibilities

• Respond to cyber incidents with increasing independence, using documented playbooks and escalation procedures.
• Investigate and triage security alerts, correlating data across tools to determine scope and severity.
• Use AI-assisted investigation tools to accelerate triage, enrich context, and identify incident patterns.
• Escalate significant or ambiguous events to senior Engineers and Incident Responders with clear, documented findings.
• Use the team's AI models to research unfamiliar threats, understand tools, and build technical knowledge.
• Apply AI tools to response work, including drafting investigation notes, summarizing log data, and accelerating root-cause analysis.
• Identify repetitive or manual tasks and use AI tools to automate or streamline them.
• Document and share effective AI-assisted workflows and prompts with teammates.
• Continuously monitor security events, logs, and behavioral indicators across the environment.
• Support phishing email response, including analysis, remediation, and user follow-up.
• Contribute to and maintain runbooks, knowledge-base articles, and standard operating procedures.
• Provide customer-facing support for cyber-related questions and issues through email and messaging platforms.
• Promote personal and professional cybersecurity hygiene through regular engagement with staff.
• Set and manage expectations with supervisory staff by establishing timelines and providing milestone updates.
• Manage and prioritize multiple concurrent workstreams in a fast-paced environment.
• Pursue relevant certifications and stay current on emerging cyber threats and industry trends.
• Participate in team knowledge-sharing sessions and post-incident reviews.

Benefits

• Education reimbursements.
• Ongoing training in technology, communication, and diversity and inclusion.
• Career mobility and opportunities to learn different functions and technologies.
• Technology pro bono programs that offer opportunities to volunteer and participate.
• Team knowledge-sharing opportunities, including lunch-and-learns, demos, and technical forums.
• Discretionary bonus based on company, business, team, and individual performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level