below marketmost similar roles pay hereabove market
This listing doesn't post a salary. Most similar roles pay
$122,275–$190,983.
Based on 240 similar postings.
Employer
About Micron Technology
Micron Technology is a global leader in innovative memory and storage solutions including DRAM, NAND flash memory, and solid-state drives for computing, mobile, automotive, and data center applications. Industry: Semiconductor Memory & Storage
Micron Technology currently has
76 open roles
on FindRole.
The Cyber Security Operations Center Analyst / AI-Automation Engineer joins the Cyber Security Operations Center team to perform a hybrid role combining security operations, threat investigation, and AI-enabled automation development. You will investigate and respond to security alerts across endpoint, identity, network, cloud, email, and data-security environments while engineering automated responses to improve cyber defense. Key responsibilities include building scripts, playbooks, and integrations using Python, PowerShell, REST APIs, and SOAR platforms. You will also design and operate AI agents using MCP and platform APIs to support threat analysis and enrichment. The role requires expertise in telemetry analysis, MITRE ATT&CK, and software development practices like Git and CI/CD to solve the business problem of scaling security operations through repeatable, automated, and AI-augmented detection and response capabilities.
Investigate, triage, and respond to security alerts across endpoint, identity, network, cloud, and email environments.
Hunt for malicious activity and correlate telemetry across security platforms to determine scope and impact.
Develop and tune detections based on emerging threats and lessons learned from investigations using the MITRE ATT&CK framework.
Build scripts, playbooks, and integrations using Python, PowerShell, and REST APIs to automate repetitive analyst workflows.
Design and operate AI agents to support investigation, enrichment, and threat analysis by querying security systems.
Manage automation as code using source control, peer review, and non-production testing.
Document investigation logic to convert analyst knowledge into reusable detections, playbooks, or AI workflows.
Monitor automation health and measure outcomes such as analyst hours returned and time to triage.
What we're looking for
Background in cybersecurity operations, incident response, threat hunting, detection engineering, security engineering, or a related field.
Understanding of attacker behaviors and common techniques across endpoint, identity, network, cloud, and application environments.
Working knowledge of MITRE ATT&CK and modern incident investigation methodologies.
Experience analyzing logs and security telemetry using SIEM, EDR/XDR, or similar technologies.
Ability to develop or modify automation in at least one language or scripting technology, such as Python, PowerShell, JavaScript/TypeScript, or REST APIs.
Understanding of APIs, JSON, authentication, and system integrations.
Ability to fix technical problems independently and work through ambiguous security investigations with strong written communication and documentation skills.
Experience building SOAR workflows, detection-as-code, cloud/identity security, Git, CI/CD, or AI/LLM workflows (preferred); relevant certifications like GCIH, GCIA, GCFA, GCTI, OSCP, Security+, or CISSP are a plus (preferred).