Associate Cyber Operations Analyst – SOC Threat Management

Job description

Accountabilities: Monitor and detect threats: Support 24x7 SOC operations by monitoring security events, identifying suspicious activity, and detecting advanced cyber threats across enterprise environments. Analyze security incidents: Review SIEM alerts, incident reporting systems, mailboxes, and other sources to identify potential incidents and determine their scope, severity, and impact. Correlate security data: Analyze and correlate information from multiple sources to assess threats affecting critical systems, applications, networks, and datasets. Support incident response: Execute established operational procedures for security incidents, identify potential mitigating controls, and escalate complex cases for deeper investigation. Apply threat intelligence: Analyze current threat intelligence, adversary activity, and emerging vulnerabilities to assess organizational risk and improve defensive measures. Perform intrusion analysis: Apply knowledge of network attacks, intrusion methodologies, IDS/IPS technologies, and threat detection techniques to investigate suspicious activity. Leverage AI and automation: Use AI/ML capabilities to identify anomalies, automate alert triage, enhance threat intelligence, and improve the efficiency and effectiveness of SOC operations. Collaborate across the SOC: Work closely with Threat Management colleagues and other security professionals to investigate incidents, communicate findings, and coordinate response activities. Maintain technical awareness: Stay current with cybersecurity trends, threat actors, attack techniques, cloud security developments, and emerging AI/ML applications relevant to security operations. Contribute to continuous improvement: Identify opportunities to improve detection processes, automation, analytical methods, and overall SOC effectiveness. Requirements Experience: At least 1 year of direct experience in cybersecurity, IT security, SOC operations, or cyber incident analysis with a relevant bachelor’s degree, or 5+ years of cybersecurity, IT, and SOC analysis/operations experience. SOC expertise: Practical understanding of security monitoring, incident management, threat detection, and cyber analysis within an operational security environment. AI/ML knowledge: Familiarity with artificial intelligence and machine learning concepts and their application to anomaly detection, behavioral analysis, threat intelligence, and SOC automation. Network security: Strong understanding of TCP/IP, Boolean logic, network-level exploits, network traffic analysis, IDS/IPS architectures, and security detection methodologies. Security platforms: Hands-on experience with SIEM/SOAR platforms and cybersecurity automation technologies. Cloud security: Familiarity with security principles, risk management, control frameworks, and cloud environments such as AWS, Azure, or GCP. Threat intelligence: Ability to interpret threat intelligence and apply knowledge of threat actors, attack techniques, and intrusion methodologies to security investigations. Data and analytical skills: Ability to analyze security data and, ideally, apply feature engineering or ML techniques to security models and behavioral detection. Communication: Excellent written and verbal communication, organization, collaboration, and interpersonal skills, with the ability to clearly communicate findings and escalate incidents appropriately. Education: Bachelor’s degree in Computer Science, Information Technology, cybersecurity, or a related field is preferred, or equivalent professional experience. Certifications: Security certifications such as CompTIA Security+, CEH, GCED, GCIA, GCDA, GCIH, GDAT, GSOC, or CISSP are desirable. Security eligibility: U.S. citizenship is required, along with the ability to obtain and maintain Public Trust security vetting. Work arrangement: Ability to work remotely in a shift-based environment supporting 24x7 SOC operations. Benefits Remote work: Fully remote position with telework eligibility and no regular travel requirement. Healthcare: Medical, dental, and vision insurance. Insurance protection: Life insurance plus short-term and long-term disability coverage. Retirement: 401(k) retirement savings plan with company matching. Time off: Paid time off and paid holidays. Professional development: Tuition assistance and support for ongoing professional development. Mission-driven environment: Opportunity to work on cybersecurity operations supporting critical federal missions and complex security environments. Technical growth: Exposure to modern SIEM/SOAR, AI/ML, cloud security, threat intelligence, and advanced cyber defense technologies. How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1 This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Associate Cyber Operations Analyst – SOC Threat Management based in the United States. This is an opportunity to join a mission-focused Security Operations Center supporting a large federal environment and protecting critical systems and data.You will contribute to 24x7 cyber threat monitoring, detection, incident analysis, and response activities in a highly collaborative SOC.The role combines hands-on security operations with cyber threat intelligence, intrusion analysis, cloud security, and modern automation.You will use SIEM, SOAR, AI/ML, and other security technologies to identify anomalies, accelerate investigations, and strengthen defensive capabilities.The position offers exposure to sophisticated network-based threats, evolving threat actors, and complex enterprise security environments.You will work alongside experienced threat management professionals while developing your expertise in incident response and advanced detection.This remote, shift-based role is well suited to a security professional who is analytical, curious, and motivated by mission-critical cybersecurity work.