Security Operations

• Provide “eyes on glass” near real-time security monitoring in a 24x7 environment by monitoring security infrastructure and security alarm devices for Indicators of Compromise utilizing a proprietary SIEM and cybersecurity tools;
• Perform near real-time security monitoring of alerts and escalating critical alerts in compliance with the service level agreement;
• Detect security incidents and analyze threats for complex and/or escalated security events;
• Perform level 2 assessment of incoming alerts (assessing the priority of the alert, determining severity of alert in respect to customer environment, correlating additional details) and coordinate with Tier-3 for critical priority incidents, if necessary;
• Perform incident response activities utilizing customer SIEM and cybersecurity toolkits;
• Respond to customer Requests For Information including using Linux command line skills to query raw logs for IOCs, answering questions about the MSS infrastructure, and features of the SIEM including correlation engine while recommending best practices;
• Develop internal and/or external documentation, such as detailed procedures, playbooks, and runbooks; review and assess reports concerning operational metrics;
• Assist with quality control during onboarding of new customers to verify validity of Use Cases and generated alerts;
• Utilize the SOC Knowledge Base and provide input on revisions as needed

Public Sector SOC Analyst

• Process initial, additional, and reopen reemployment assistance claims.
• Performs specialized work assignments and other related work as required within the units including but not limited to work search audits, eligibility reviews, job service registration, potential issues, rejected weeks, and/or returned employer notices.
• Determines issues, concerns, and/or complaints from claimants, employers, and other customers.
• Access and research necessary records to either resolve those issues or refer to a specific or appropriate program specialist or supervisor.
• Explains points of law and reasons for determinations regarding eligibility for reemployment assistance benefits.
• Research and explain the reemployment assistance program at the request of callers and direct them to the appropriate place to file a claim.
• Refer to various community resources and to One-Stop centers as appropriate.

Employment Security Representative I

• Provide advanced operational support for cybersecurity platforms and services
• Investigate and resolve escalated platform and service issues
• Act as an Incident Manager during major incidents with cybersecurity platforms
• Develop and maintain operational runbooks and SOPs
• Validate monitoring, alerting, and service ownership for newly onboarded services
• Support cloud and hybrid platform operations across AWS, Azure, and Google Cloud Platform

Cyber Tech Operations Engineer, Level 2

• Run daily, weekly, and periodic IT and security checklists, with a focus on Google SecOps/Chronicle monitoring
• Perform health checks across GCP infrastructure, SaaS applications, and security tooling (alerts, compliance, CI/CD pipelines)
• Troubleshoot security or infrastructure issues, document fixes, and raise follow-up actions
• Collaborate with DevOps and InfraOps on platform-level and security-related issues
• Identify and propose security and platform improvements as you gain business context
• Implement automation, security tooling, and platform enhancements to strengthen cloud and SaaS environments
• Contribute to scripts, dashboards, and operational improvements with a focus on security and compliance
• Feed insights from day-to-day work into long-term IT security and operational strategy
• Occasionally assist with IT support tasks across systems, hardware, and software
• Prioritize tasks effectively and align timelines with stakeholders

IT & Security Operations Analyst

• Responsible for planning and implementing security measures to protect computer systems, networks, and data.
• Handle higher level security investigations and incidents.
• Monitor network traffic for security events and perform triage analysis to identify security incidents.
• Receive incidents and perform deep analysis; correlate with threat intelligence to identify the threat actor, nature of the attack and systems or data affected.
• Define and execute on strategy for containment, remediation, and recovery.
• Deliver cyber intelligence services and material to information technology and business leaders.
• Identify new threat tactics, techniques and procedures used by cyber threat actors.
• Publish actionable threat intelligence for business and technology management.
• Participate in threat hunting activities to proactively search for threats in the enterprise environment.
• Create and maintain use cases for recurring investigation/incident triggers in support of the 24/7 Cyber Threat Operations and Cyber Threat Management program.
• Act as coordinator in the event of escalated cyber threats/incidents for Tier 1 analysts.
• Assist in escalated computer security incidents and cyber investigations including computer forensics, network forensics, root cause analysis and malware analysis.

Senior Information Security Operations Center Analyst

• Reporting directly to the SOC Manager, the SOC Team Lead at Deepwatch will make a significant impact on global security.
• Actively detect and respond to incidents in real-time to protect our valued customers.
• Take a proactive role in guiding analysts in cybersecurity-related education, helping them achieve their goals.
• Tackle the hardest investigations a customer will have, ensuring that they get timely and comprehensive reports.
• Support our customers by understanding their bespoke environment, needs and challenges.
• Develop your skills by working with the best responders in the industry, your team and your shift!

SOC Team Lead

• Exposure to all domains of Information Security
• Exec communication and presence – develop communications and presentations for C-suite and other leadership consumption.
• Project management
• Cross-functional relationship development
• Stakeholder management
• Influence, negotiation, and prioritization.
• Develop a thorough understanding of controls, assurance, and testing.
• Utilization of cloud-based software solutions and software to manage audits and perform BAU tasks.
• Gain an understanding of FIS Corporate/ Leveraged Infrastructure and LOB operations and how those functions impact audit and assurance interests.

Junior Risk Analyst, System and Organization Control (SOC) Reporting

• Lead investigations of complex, high severity security incidents from detection through containment, remediation, and recovery
• Act as the primary escalation point for Tier 3 alerts and incidents
• Perform root cause analysis with actionable remediation plans
• Serve as the primary liaison to the MDR provider
• Validate and triage MDR alerts
• Ensure alignment on response protocols and escalation procedures
• Provide tuning recommendations to improve detection fidelity
• Develop and maintain incident response playbooks, runbooks, and workflows
• Analyze threat actor tactics, techniques, and procedures (TTPs) and translate findings into improved defenses and detection content
• Conduct proactive, hypothesis-driven threat hunts across endpoint, identity, network, and cloud telemetry
• Leverage threat intelligence and the MITRE ATT&CK framework to surface threats that evade automated detection
• Identify recurring, manual, or manual heavy SOC processes
• Design automation to reduce analyst effort and accelerate response
• Build, test, and maintain automated playbooks and response workflows in a SOAR platform
• Monitor and analyze logs and alerts across SIEM, EDR, identity, and cloud platforms
• Correlate data across multiple sources to identify patterns, anomalies, and emerging threats
• Mentor Tier 1 and Tier 2 analysts
• Document incident timelines, findings, and lessons learned
• Generate executive-level and technical reports on SOC performance and incidents

Senior Security Analyst – Security Operations Center

• Lead triage and investigation of security alerts, escalating and coordinating incident response as needed
• Perform root cause analysis, scope affected assets, and drive containment, eradication, and recovery
• Correlate events across SIEM, EDR, IDS/IPS, firewalls, cloud logs, and identity platforms
• Develop, refine, and maintain SOC playbooks, runbooks, and detection logic aligned to the MITRE ATT&CK framework
• Mentor junior analysts and provide guidance on investigation techniques
• Coordinate with Threat Intelligence to enrich investigations
• Partner with Engineering teams to improve log fidelity
• Create clear, actionable incident reports and executive summaries
• Support purple team exercises and post-incident reviews

Vice President, Senior SOC Analyst

• Implementing and managing physical security measures to protect people, assets, and information
• Conducting risk assessments and designing security systems to enhance safety protocols
• Developing and executing emergency response plans to address potential security threats
• Utilizing CCURE and other security management software for monitoring and incident tracking
• Coordinating with stakeholders to maintain compliance with regulatory standards and security frameworks
• Analyzing security incidents and breaches to inform improvements in security processes
• Overseeing asset protection and business continuity management to minimize operational risks
• Leading security auditing documentation and evaluations to confirm adherence to security standards
• Managing surveillance systems and interpreting footage to identify and address security concerns
• Training team members on security awareness and incident response procedures

Security Operations Analyst – Fixed Term

• Plans, organizes, and conducts investigations related to both internal and external security issues
• Analyzes and evaluates investigative progress to assess priorities, leads, and predetermines goals and objectives
• Develops, trains, and directs external security personnel
• Establishes connections between suspects and other violators by linking evidence uncovered from various sources
• Develop investigative strategy, interview employees and vendors, obtain admissions, and document investigation with evidence
• Implements policies, procedures, and systems to maintain and enhance the organizational mission
• Interprets and applies laws, orders, rules, and regulations pertaining to enterprise policy and procedure
• Collaborate with all company stakeholders
• Maintains a liaison with local, state, and federal law enforcement agencies
• Prepares clear, comprehensive, and cohesive investigative reports
• Reviews and analyzes functional business operations to recommend strategies for prevention, mitigation, and recovery
• Develops and presents training programs for employees, contractors, and temporary employees

Security Operations Analyst I

• Monitor and triage security alerts and events
• Perform initial investigation of suspicious activity across endpoint, network, identity, email, cloud, application, and system log sources
• Analyze and investigate data in the SIEM/SOAR
• Document investigations, findings, actions taken, and escalation details

Cybersecurity SOC Analyst

• Analyze intricate cybersecurity challenges
• Cultivate substantial relationships with clients
• Broaden technical knowledge and proficiency in cybersecurity
• Develop and optimize detection rules, use cases, and playbooks within XSIAM OR Google SecOps
• Assist with onboarding new data sources and security tools integration for enriched threat visibility

Security Operations jobs in Florida

See all jobs on JobTailor