Security Operations

• Support the identification and remediation of OT vulnerabilities and misconfigurations in alignment with internal prioritization and remediation guidelines
• Collaborate with manufacturing sites, engineering teams, and cybersecurity teams to improve OT security posture
• Assist with vulnerability scanning and assessment activities across OT assets, applications, and infrastructure
• Monitor and analyze potential cyber threats and escalate issues to senior team members or incident response teams as appropriate
• Support threat analysis and threat hunting activities under guidance from senior analysts
• Assist in preparing reports and communications on OT risk, vulnerabilities, and remediation progress
• Support OT cybersecurity governance, metrics, and reporting activities within the Cyber Fusion Center
• Utilize enterprise tools (e.g., ServiceNow) to track and manage vulnerability remediation tasks
• Execute cyber hygiene activities across manufacturing environments, including asset inventory validation, patching coordination support, backup validation checks, endpoint hardening activities, account and access reviews, and identification of unnecessary services or network communications
• Support implementation and maintenance of baseline OT security controls such as network segmentation, firewall rule hygiene, and secure remote access
• Participate in continuous improvement initiatives and help identify opportunities for automation and process enhancements

Associate Specialist, Cybersecurity Operations

• Run daily, weekly, and periodic IT and security checklists, with a focus on Google SecOps/Chronicle monitoring
• Perform health checks across GCP infrastructure, SaaS applications, and security tooling (alerts, compliance, CI/CD pipelines)
• Troubleshoot security or infrastructure issues, document fixes, and raise follow-up actions
• Collaborate with DevOps and InfraOps on platform-level and security-related issues
• Identify and propose security and platform improvements as you gain business context
• Implement automation, security tooling, and platform enhancements to strengthen cloud and SaaS environments
• Contribute to scripts, dashboards, and operational improvements with a focus on security and compliance
• Feed insights from day-to-day work into long-term IT security and operational strategy
• Occasionally assist with IT support tasks across systems, hardware, and software
• Prioritize tasks effectively and align timelines with stakeholders

IT & Security Operations Analyst

• Lead triage and investigation of security alerts, escalating and coordinating incident response as needed
• Perform root cause analysis, scope affected assets, and drive containment, eradication, and recovery
• Correlate events across SIEM, EDR, IDS/IPS, firewalls, cloud logs, and identity platforms
• Develop, refine, and maintain SOC playbooks, runbooks, and detection logic aligned to the MITRE ATT&CK framework
• Mentor junior analysts and provide guidance on investigation techniques
• Coordinate with Threat Intelligence to enrich investigations
• Partner with Engineering teams to improve log fidelity
• Create clear, actionable incident reports and executive summaries
• Support purple team exercises and post-incident reviews

Vice President, Senior SOC Analyst

• Utilize various physical security asset monitoring and surveillance systems to detect potential unauthorized access, suspicious activity, or other security incidents
• Monitor open-source threat intelligence and other internal SaaS tools to maintain situational awareness of persistent or emergency global events with potential or direct impact to operations
• Support access control and visitor management processes
• Manage security-related calls for service and provide general guidance to employees, vendors, and guests
• Maintain awareness of business travelers and personnel accessing Twilio facilities
• Partner with local site security teams to escalate and dispatch resources for incident and alarm response
• Review travel requests to elevated risk locations, assist travelers through the approval process, and cross-reference live itineraries with external incidents
• Perform the first point of incident intake across a variety of emergencies, including medical emergencies, natural disasters, fire/evacuation, travel disruptions, and security incidents
• Assess and triage events and incidents to determine their impact to operations
• Dispatch and coordinate response with emergency response personnel
• Communicate effectively on emerging incidents to large audiences to share situational awareness or tactical updates as warranted
• Maintain real-time incident documentation for reporting and analysis
• Perform Life-Safety checks for Twilio in areas impacted by potentially life-threatening conditions
• Participate in post-incident reviews to document and implement corrective action and improvements to future response
• Maintain a strong understanding of security and emergency standard operating procedures
• Utilize critical thinking and problem solving skills to analyse situations and implement solutions
• Support large projects that will improve Twilio’s GSOC capabilities and initiatives

Global Security Operations Center Operator

• Monitor and manage the Information Security request queue, including analysis and resolution of outstanding issues.
• Manage endpoint and network security environments including overall health, policy modifications, troubleshooting/resolving issues and producing monthly health metrics for workstations, servers, and identities.
• Work directly with the Information Security Team and Security Operations Center (SOC) to analyze and resolve security events/alerts. This includes some monitoring and management of the SIEM platform.
• Manage and maintain Information Security training and awareness campaigns (e.g., training, phishing). Developing/monitoring campaigns, ensuring required training is complete, producing reports/metrics and recommending improvements to the current process.
• Conduct internal security control testing. Includes gathering, uploading, and reviewing evidence within the GRC (Governance, Risk and Compliance) tool. Supporting PCI, SOC and related audits.
• Other duties as assigned.

Engineer, IT Information Security Operations

• Serves as a senior technical leader within the Cybersecurity Operations Center
• Focused on advancing detection engineering, automated response, and threat intelligence capabilities
• Responsible for designing, developing, and continuously improving high-fidelity detections across enterprise telemetry
• Engineering automated response workflows that reduce response times and operational burden
• Champion modern CSOC practices including detection-as-code, threat-informed defense, and integration of AI and agentic workflows
• Partners closely with cross-functional teams across infrastructure, cloud, identity, and application domains
• Drives innovation in CSOC operations, translates threat intelligence into actionable detections and hunts
• Mentors junior engineers and analysts, fostering technical growth and promoting scalable, repeatable security operations processes

Security Operations jobs in Pennsylvania

See all jobs on JobTailor

Associate Specialist, Cybersecurity Operations

IT & Security Operations Analyst

Vice President, Senior SOC Analyst

Global Security Operations Center Operator

Engineer, IT Information Security Operations

Senior Cybersecurity Operations Engineer – AI