Security Operations Associate

What you'll do

• Analyze security alerts by reviewing system logs, endpoint telemetry, and network traffic to determine root causes.
• Utilize SIEM, IDS, EDR, and malware analysis tools to strengthen threat detection and response.
• Execute incident response activities including containment, eradication, and recovery while documenting all actions.
• Develop and maintain threat detection playbooks and standard operating procedures based on industry best practices.
• Implement improvements to security tools, processes, and procedures through cross-functional initiatives.
• Use enterprise-authorized AI capabilities to accelerate triage, evidence synthesis, and incident reporting.
• Produce clear investigation notes and concise incident updates for peer and executive audiences.

What we're looking for

• Formal training or certification with 3+ years of experience in information security, SOC analysis, and incident response.
• Ability to demonstrate a structured, analytical approach to investigating alerts and documenting findings for peer and executive audiences.
• Hands-on familiarity with SIEM, intrusion detection systems, email analysis, vulnerability analysis, log analysis, PCAP, and malware analysis.
• Foundational understanding of operating systems, cloud, and networking fundamentals including the OSI model, Windows/Linux, and various protocols.
• Basic scripting/automation skills in Python, PowerShell, or Bash to improve security workflows.
• Knowledge of cyber threats and adversary TTPs, including familiarity with MITRE ATT&CK.
• Willingness to work a shift pattern that may include weekend and holiday coverage.
• Degree in Computer Science, Information Security, or a related field (preferred).
• Industry-recognized security certifications such as GIAC or ISC2 (preferred).
• Experience using enterprise-authorized AI capabilities to support security operations workflows (preferred).