Security Operations

• Define top-level or cross-subsystem digital architecture for Satellite communication ASICs and SoCs.
• Lead hardware realization of key communication functions such as modem pipelines, coding engines, digital beamforming, switching fabrics, and packet/data processing.
• Drive end-to-end technical planning from concept through silicon validation.
• Establish system-level tradeoffs among throughput, latency, power, die area, reliability, and manufacturability.
• Provide technical leadership across design, verification, physical design, firmware, packaging, and system teams.
• Review and influence architectural partitioning between ASIC, FPGA, software, and RF/analog domains.
• Develop methodologies and reusable IP strategies that improve schedule, quality, and scalability.
• Mentor technical leaders and act as a go-to expert for critical design reviews and issue resolution.
• Support roadmap planning and future product definition.

Principal Modem SoC Engineer

• Monitor, triage, and investigate alerts across SIEM, EDR, NDR, and DLP platforms
• Lead or support incident response activities including scoping, containment, eradication, and post-incident review in alignment with NIST SP 800-61r2
• Develop, tune, and maintain detection rules, correlation queries, and behavioral models across the security stack
• Conduct threat hunting exercises using structured methodologies (MITRE ATT&CK, hypothesis-driven)
• Build and maintain security automation workflows to reduce manual triage and accelerate response (Python, PowerShell, GitHub Actions, REST APIs)
• Integrate security tooling with ticketing and workflow platforms (Jira) for consistent case management and SLA tracking
• Contribute to SOAR playbook development and refinement
• Support vulnerability management operations including Tenable scan management, findings triage, and Jira-based remediation tracking
• Maintain and optimize SIEM content, log pipelines, and data sources; ensure complete and accurate log ingestion from cloud, endpoint, network, and identity layers
• Manage and tune EDR policies, exclusions, and response actions within CrowdStrike Falcon
• Support DLP policy operations, including investigation support for policy violations
• Maintain firewall log visibility and coordinate with network/infrastructure teams on Fortinet policy enforcement
• Support evidence collection and control testing for HITRUST CSF v11 and SOC 2 Type II assessments
• Contribute to security documentation including runbooks, playbooks, and operational procedures
• Participate in tabletop exercises and contribute to lessons-learned outcomes
• Support identity and access-related security reviews in collaboration with the IAM/infrastructure team
• Monitor and investigate anomalous activity associated with AI agent infrastructure, API integrations, and LLM-based services
• Contribute to security controls and detection coverage for AI workloads under the organization’s AI governance framework
• Help develop behavioral baselines and detection logic specific to AI/agentic traffic patterns

Security Operations Engineer

• Actively participate in 24x7 operations of the Long View Security Operations Centre
• Monitor, identify and validate security events generated from Security Information Event Management (SIEM) tools
• Actively work in monitoring, event and incident management tools like Sentinel and ServiceNow
• Respond to critical business impacting situations and coordinate the efforts required to engage the proper resources to remediate the issue
• Coordinate major security incident situations and provide internal communications via email in a timely manor
• Provide general support for Security Information Event Management (SIEM) tool changes, tweaks, additions and updates within Sentinel and any additional tools leveraged by Long View
• Provide security guidance to team members across the organization how to best identify, contain and remediate security related incidents
• Understand complex issues across on-premise, public and private cloud solutions and articulate the impact to higher tier team members
• Follow and establish process documentation for receipt of security alerts for monitored devices, acknowledge the receipt of the event, opening and/or updating service desk tickets to track the handling of events to resolution and closure, assignment of the ticket to the appropriate owner
• Work with cloud technologies like Azure, AWS and Google Cloud Platform
• Fulfill reporting requests that can be pulled from Long View tools

Junior Security Operations Center Analyst

• Design, develop, and maintain security-focused platforms using scripting languages, C++, and Rust.
• Implement modern development processes (CI/CD, DevOps, Agile) to ensure efficient and reliable delivery.
• Build scalable solutions across Linux-based environments and cloud-native architectures.
• Integrate diverse systems using APIs, webhooks, and other communication protocols.
• Develop and maintain integrations with AI-driven tools and data enrichment platforms to enhance SecOps capabilities.
• Collaborate with SecOps teams to design and implement advanced monitoring, detection, and response solutions.
• Troubleshoot complex systems and resolve performance, reliability, and security issues.
• Architect and manage cloud-based environments (AWS, Azure, GCP) with a focus on security and scalability.
• Optimize Linux OS and kernel-level configurations for performance and resilience.
• Automate infrastructure provisioning and configuration management.

Senior Cybersecurity Engineer – Security Operations

• Overseeing and monitoring multiple feeds in a 24/7 environment to detect, verify, and respond to cyber threats
• Collaborating with multiple teams and personnel, including other SOC analysts and subject matter experts
• Participating in red-team/blue-team simulated attacks and tabletop exercises
• Partnering with Security Design and Architecture Engineers to implement and improve technology and processes to enhance SOC monitoring, investigation, and response capabilities

Senior SOC Analyst – 2ND/3RD SHIFT

• Monitor security alerts and events in the Security Operations Center (SOC) and perform initial triage, analysis, and escalation as needed.
• Investigate potential security incidents using SIEM, endpoint, network, and other security tools to determine scope, impact, and next steps.
• Document findings, actions taken, and incident details clearly and accurately in accordance with SOC procedures and reporting requirements.
• Escalate confirmed or high-risk incidents to senior analysts or incident response teams when appropriate.
• Support threat detection, alert tuning, and ongoing improvement of SOC monitoring processes and playbooks.
• Collaborate with internal teams to gather information, support investigations, and help protect enterprise systems and data.
• Stay current on common cyber threats, vulnerabilities, and attacker tactics, techniques, and procedures (TTPs).

SOC Analyst, Tier 1

SOC Analyst – Shift Lead

SOC Analyst, Tier 2

• Independently lead multiple technical engagements simultaneously, ensuring timely delivery of measurable security outcomes and operational improvements across client environments
• Convert client business requirements into actionable technical strategies and capabilities that align with security objectives and deliver measurable value
• Collaborate with internal teams and clients to design strategic roadmaps and execute plans that advance operational maturity and security posture
• Drive service maturity by analyzing KPIs, SLAs, and performance trends to deliver actionable insights and continuous value improvements
• Evaluate and align security solutions and recommendations with client requirements, risk profiles, and strategic objectives to ensure optimal fit and effectiveness
• Assist in the documentation of business requirements, use cases, and ROI analyses to support informed decision-making and demonstrate value
• Act as a technical advisor during pre-sales and post-sales engagements, ensuring solution alignment and client confidence
• Provide technical expertise for proposals, contracts, and service descriptions to ensure accuracy and alignment with client needs
• Recognize and recommend cross-sell and up-sell opportunities across AFC services
• Lead or support security initiatives from planning through execution
• Apply hands-on expertise to operationalize threat intelligence across EDR, SIEM, SOAR, and related domains, improving detection and response capabilities
• Analyze patterns and anomalies to identify potential advanced threats and recommend proactive mitigation strategies
• Conduct architectural reviews and provide recommendations to strengthen security, posture and operational efficiency
• Assess and recommend custom detection logic, automation, or tool enhancements to address evolving threats and operational needs
• Assist with platform configurations, detection logic, automation improvements
• Build and develop relationships with internal and external stakeholders
• Identify and assess project risks, developing mitigation strategies to ensure successful delivery and minimize impact
• Validate project scope and deliverables to ensure alignment with client expectations and contractual obligations
• Represent Optiv in client meetings, delivering clear technical guidance and executive-level communication
• Collaborate with team members to identify issues, develop strategies, and drive continuous improvement
• Provide support for projects spanning multiple functional groups by identifying collaborative opportunities, enhancing existing deliverables, and strengthening Optiv’s value to our clients
• Ensure projects are delivered on time, within budget, and to quality standards, meeting or exceeding client expectations

Cyber Operations Advisor

• Serves as a senior technical leader within the Cybersecurity Operations Center
• Focused on advancing detection engineering, automated response, and threat intelligence capabilities
• Responsible for designing, developing, and continuously improving high-fidelity detections across enterprise telemetry
• Engineering automated response workflows that reduce response times and operational burden
• Champion modern CSOC practices including detection-as-code, threat-informed defense, and integration of AI and agentic workflows
• Partners closely with cross-functional teams across infrastructure, cloud, identity, and application domains
• Drives innovation in CSOC operations, translates threat intelligence into actionable detections and hunts
• Mentors junior engineers and analysts, fostering technical growth and promoting scalable, repeatable security operations processes

Senior Cybersecurity Operations Engineer – AI

• engineering, maintaining, and optimizing the automation architecture across our cybersecurity ecosystem
• developing, deploying, and maintaining automation scripts utilizing Python, Bash, and PowerShell
• architecting integrations between security tools and enterprise applications via REST APIs
• designing and maintaining automated processes for vulnerability management, patch management, and compliance reporting
• driving the automation of continuous compliance monitoring and evidence gathering for critical frameworks
• automating security monitoring, anomaly detection, and response workflows
• executing proof-of-concept testing and validation for new security methodologies and tooling
• maintaining documentation for all engineered scripts, API integrations, and automation workflows
• designing and implementing full-stack solutions to aggregate, transform, and visualize security data
• developing dashboards and reporting systems for continuous visibility into compliance status and vulnerabilities
• applying data modeling and anomaly detection to identify suspicious activities
• partnering with technical teams to analyze existing workflows and engineer automated security solutions

Security Operations Engineer I

• Zero-Trust System Design: Draft, review, and maintain zero-trust SOPs across identity, device, data, and infrastructure.
• Infrastructure-as-Code & Automation: Extend Net-Sec-Ops pipelines with IaC (Ansible) for firewalls, switches, SD-WAN, and edge fabric.
• Systems Resilience & Disaster Recovery: Architect and automate backup, failover, and DR workflows for all network devices.
• Security & Compliance Orchestration: Integrate vulnerability scanners (Nessus, Qualys), threat-intel feeds, and policy-as-code into CI/CD pipelines.
• Network Configuration & Lifecycle Management: Operate configuration managers to centralize topology, inventory, and device state.
• Cross-Functional Architecture Governance: Collaborate with platform, edge, security, and product teams to embed network security into CI/CD and DevOps pipelines.
• Capacity & Performance Modeling: Model traffic and compute link utilization; forecast capacity needs using historical data and predictive analytics.
• Continuous Process & Tool Improvement: Evaluate emerging trends; propose tool/process changes to reduce manual effort and improve security posture.
• Prototyping & Customer Validation: Rapidly spin up proof-of-concept environments to test complex customer requests.

Systems Infrastructure, Network Security Operations Engineer

• Monitor global events and assess threats to protect CEVA’s people and assets
• Analyze intelligence data and produce actionable intelligence reports
• Coordinate emergency response efforts during security incidents
• Support investigations related to security incidents
• Develop GSOC standard operating procedures
• Liaise with CEVA Security and Intelligence leadership for alignment

Security Operations Center Analyst – Physical Security

• Analyze intricate cybersecurity challenges
• Cultivate substantial relationships with clients
• Broaden technical knowledge and proficiency in cybersecurity
• Develop and optimize detection rules, use cases, and playbooks within XSIAM OR Google SecOps
• Assist with onboarding new data sources and security tools integration for enriched threat visibility

SecOps Engineer

• Perform day-to-day operations for TMC’s Security Operation Center (SOC)
• Monitor security alerts from different technologies to identify security incidents
• Assess potential cyber threats from various workflows and perform appropriate responses
• Analyze security, cloud, and application security risks
• Provide support for high profile security incidents
• Ensure case management and alert development life cycles are followed
• Collaborate on efforts to enhance monitoring capabilities of critical data

SOC Analyst

• lead and manage the daily operations of our centralized security command center
• provide strategic oversight and operational control for the PSOC and Alternate PSOC teams
• ensure effective monitoring, detection, analysis, and dispatch of Protective Security Officers to incidents threatening USAA personnel and assets
• collaborate daily with Protective Security Directors, Security teams, and the Unified Command Center in implementing security protocols
• provide regular reporting on physical security posture, emerging threats, and recommended enhancements to management and executives
• direct policy and procedures to ensure routine and emergency response actions of the armed proprietary security force
• review data analytics of security activities and incidents to determine proper use and placement of security force team members
• responsible for Incident Command during critical incidents and perform liaison with Situation Management Teams, Corporate Investigations, and local authorities

Director, Security Operations Center

• Plan, lead, and execute high-impact offensive cyber operations, including penetration tests and red team operations
• Continuously evolve offensive security capabilities and operations
• Partner closely with cybersecurity and business teams to maximize defensive outcomes
• Clearly communicate complex technical findings, impact, and recommendations

Technical Lead, Offensive Cyber Security Operations

• Communicating with the law enforcement community in regards to life threatening situations 24x7x365.
• Demonstrating a keen ability to multi-task while still making sound decisions under high pressure situations.
• Ensuring that all cases are correctly documented and managed end to end in compliance with all applicable laws and company procedures.
• Understanding the applications and systems necessary to track, process and respond to life threatening/emergency situations.
• Collaborating with appropriate departments specifically with Network/Security/Legal.
• Providing value-add feedback to leadership on call/case handling.

Senior Analyst, Security Operations

• Deliver security monitoring and incident response services using Microsoft Sentinel
• Help clients detect, investigate, and respond to security threats in hybrid and cloud environments
• Contribute to the design, implementation, tuning, and ongoing operation of Sentinel-based security solutions
• Support clients in improving their security posture and operational maturity
• Work in a matrixed delivery environment with clients, internal security architects, and Microsoft-aligned teams
• Demonstrate Avanade’s values, professional consulting behaviors, and a strong focus on quality and outcomes

Manager, Security Operations – Sentinel

• Triage alerts, investigate suspicious activity, lead incident response steps, and coordinate containment and recovery efforts.
• Make sure logs and security data are gathered correctly, cleaned up, and organized so the team can analyze them effectively.
• Examine systems, files, logs, and network data to understand what happened during security events.
• Help newer analysts grow by sharing your experience, offering guidance, and running training sessions when needed.
• Assist team members with technical questions, tool usage, investigation methods, and established response workflows.
• Act as the point person during your shift: manage workload, oversee investigations, ensure smooth handoffs, and support teammates.
• Look for opportunities to improve processes, recommend new tools or automations, and help refine how the team operates.

See all jobs on JobTailor