Associate Cyber Operations Analyst – SOC Threat Management

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Associate Cyber Operations Analyst – SOC Threat Management based in the United States.

This is an opportunity to join a mission-focused Security Operations Center supporting a large federal environment and protecting critical systems and <data.You> will contribute to 24x7 cyber threat monitoring, detection, incident analysis, and response activities in a highly collaborative SOC.The role combines hands-on security operations with cyber threat intelligence, intrusion analysis, cloud security, and modern <automation.You> will use SIEM, SOAR, AI/ML, and other security technologies to identify anomalies, accelerate investigations, and strengthen defensive capabilities.The position offers exposure to sophisticated network-based threats, evolving threat actors, and complex enterprise security <environments.You> will work alongside experienced threat management professionals while developing your expertise in incident response and advanced detection.This remote, shift-based role is well suited to a security professional who is analytical, curious, and motivated by mission-critical cybersecurity work.

Accountabilities

Monitor and detect threats: Support 24x7 SOC operations by monitoring security events, identifying suspicious activity, and detecting advanced cyber threats across enterprise environments.

Analyze security incidents: Review SIEM alerts, incident reporting systems, mailboxes, and other sources to identify potential incidents and determine their scope, severity, and impact.

Correlate security data: Analyze and correlate information from multiple sources to assess threats affecting critical systems, applications, networks, and datasets.

Support incident response: Execute established operational procedures for security incidents, identify potential mitigating controls, and escalate complex cases for deeper investigation.

Apply threat intelligence: Analyze current threat intelligence, adversary activity, and emerging vulnerabilities to assess organizational risk and improve defensive measures.

Perform intrusion analysis: Apply knowledge of network attacks, intrusion methodologies, IDS/IPS technologies, and threat detection techniques to investigate suspicious activity.

Leverage AI and automation: Use AI/ML capabilities to identify anomalies, automate alert triage, enhance threat intelligence, and improve the efficiency and effectiveness of SOC operations.

Collaborate across the SOC: Work closely with Threat Management colleagues and other security professionals to investigate incidents, communicate findings, and coordinate response activities.

Maintain technical awareness: Stay current with cybersecurity trends, threat actors, attack techniques, cloud security developments, and emerging AI/ML applications relevant to security operations.

Contribute to continuous improvement: Identify opportunities to improve detection processes, automation, analytical methods, and overall SOC effectiveness.

Requirements

Experience: At least 1 year of direct experience in cybersecurity, IT security, SOC operations, or cyber incident analysis with a relevant bachelor’s degree, or 5+ years of cybersecurity, IT, and SOC analysis/operations experience.

SOC expertise: Practical understanding of security monitoring, incident management, threat detection, and cyber analysis within an operational security environment.

AI/ML knowledge: Familiarity with artificial intelligence and machine learning concepts and their application to anomaly detection, behavioral analysis, threat intelligence, and SOC automation.

Network security: Strong understanding of TCP/IP, Boolean logic, network-level exploits, network traffic analysis, IDS/IPS architectures, and security detection methodologies.

Security platforms: Hands-on experience with SIEM/SOAR platforms and cybersecurity automation technologies.

Cloud security: Familiarity with security principles, risk management, control frameworks, and cloud environments such as AWS, Azure, or GCP.

Threat intelligence: Ability to interpret threat intelligence and apply knowledge of threat actors, attack techniques, and intrusion methodologies to security investigations.

Data and analytical skills: Ability to analyze security data and, ideally, apply feature engineering or ML techniques to security models and behavioral detection.

Communication: Excellent written and verbal communication, organization, collaboration, and interpersonal skills, with the ability to clearly communicate findings and escalate incidents appropriately.

Education: Bachelor’s degree in Computer Science, Information Technology, cybersecurity, or a related field is preferred, or equivalent professional experience.

Certifications: Security certifications such as CompTIA Security+, CEH, GCED, GCIA, GCDA, GCIH, GDAT, GSOC, or CISSP are desirable.

Security eligibility: U.S. citizenship is required, along with the ability to obtain and maintain Public Trust security vetting.

Work arrangement: Ability to work remotely in a shift-based environment supporting 24x7 SOC operations.

Benefits

• Remote work: Fully remote position with telework eligibility and no regular travel requirement.
• Healthcare: Medical, dental, and vision insurance.
• Insurance protection: Life insurance plus short-term and long-term disability coverage.
• Retirement: 401(k) retirement savings plan with company matching.
• Time off: Paid time off and paid holidays.
• Professional development: Tuition assistance and support for ongoing professional development.
• Mission-driven environment: Opportunity to work on cybersecurity operations supporting critical federal missions and complex security environments.
• Technical growth: Exposure to modern SIEM/SOAR, AI/ML, cloud security, threat intelligence, and advanced cyber defense technologies.