Security Operations

• Monitor SIEM, EDR, IDS/IPS, email security, vulnerability, and other security platforms for suspicious activity.
• Triage alerts and distinguish false positives from actionable security events.
• Investigate security events using log data, endpoint telemetry, network data, and threat intelligence.
• Escalate incidents in accordance with severity, impact, and response procedures.
• Document investigations, findings, and actions taken in ticketing/case management systems.
• Support incident handling activities including containment, evidence collection, and coordination with technical teams.
• Review vulnerability findings and assist with prioritization and routing to responsible teams.
• Participate in shift turnover reporting and maintain accurate operational notes.
• Support development and refinement of detection rules, playbooks, and standard operating procedures.
• Contribute to metrics reporting such as alert volumes, escalation rates, false positives, and response timelines.

SOC Analyst Tier 2

• Monitor SIEM, EDR, IDS/IPS, email security, vulnerability, and other security platforms for suspicious activity
• Perform initial triage of alerts and identify potential false positives versus events requiring further investigation
• Collect and review basic log data, endpoint telemetry, and network activity to support analysis
• Escalate suspected security incidents to Tier II/III analysts in accordance with defined procedures
• Document alerts, actions taken, and relevant details in ticketing/case management systems
• Follow established playbooks and standard operating procedures for alert handling
• Support incident response activities by gathering information and coordinating with senior analysts as needed
• Assist with vulnerability findings review and route issues to appropriate teams
• Participate in shift turnover reporting and maintain accurate operational notes
• Contribute to maintaining accurate documentation and knowledge base articles
• Other responsibilities as assigned

SOC Analyst Tier 1

• Define top-level or cross-subsystem digital architecture for Satellite communication ASICs and SoCs.
• Lead hardware realization of key communication functions such as modem pipelines, coding engines, digital beamforming, switching fabrics, and packet/data processing.
• Drive end-to-end technical planning from concept through silicon validation.
• Establish system-level tradeoffs among throughput, latency, power, die area, reliability, and manufacturability.
• Provide technical leadership across design, verification, physical design, firmware, packaging, and system teams.
• Review and influence architectural partitioning between ASIC, FPGA, software, and RF/analog domains.
• Develop methodologies and reusable IP strategies that improve schedule, quality, and scalability.
• Mentor technical leaders and act as a go-to expert for critical design reviews and issue resolution.
• Support roadmap planning and future product definition.

Principal Modem SoC Engineer

• Monitor, triage, and investigate alerts across SIEM, EDR, NDR, and DLP platforms
• Lead or support incident response activities including scoping, containment, eradication, and post-incident review in alignment with NIST SP 800-61r2
• Develop, tune, and maintain detection rules, correlation queries, and behavioral models across the security stack
• Conduct threat hunting exercises using structured methodologies (MITRE ATT&CK, hypothesis-driven)
• Build and maintain security automation workflows to reduce manual triage and accelerate response (Python, PowerShell, GitHub Actions, REST APIs)
• Integrate security tooling with ticketing and workflow platforms (Jira) for consistent case management and SLA tracking
• Contribute to SOAR playbook development and refinement
• Support vulnerability management operations including Tenable scan management, findings triage, and Jira-based remediation tracking
• Maintain and optimize SIEM content, log pipelines, and data sources; ensure complete and accurate log ingestion from cloud, endpoint, network, and identity layers
• Manage and tune EDR policies, exclusions, and response actions within CrowdStrike Falcon
• Support DLP policy operations, including investigation support for policy violations
• Maintain firewall log visibility and coordinate with network/infrastructure teams on Fortinet policy enforcement
• Support evidence collection and control testing for HITRUST CSF v11 and SOC 2 Type II assessments
• Contribute to security documentation including runbooks, playbooks, and operational procedures
• Participate in tabletop exercises and contribute to lessons-learned outcomes
• Support identity and access-related security reviews in collaboration with the IAM/infrastructure team
• Monitor and investigate anomalous activity associated with AI agent infrastructure, API integrations, and LLM-based services
• Contribute to security controls and detection coverage for AI workloads under the organization’s AI governance framework
• Help develop behavioral baselines and detection logic specific to AI/agentic traffic patterns

Security Operations Engineer

• Own the working relationship with CSG on data residency, PII handling, access governance, and model security controls
• Translate policy into guardrails the delivery team and citizen developers can act on
• Build and maintain security tooling, guardrail enforcement, and policy-as-code integrations across Enterprise AI platforms
• Reduce manual review through automation where possible
• Develop reusable security components and patterns that delivery teams and citizen developers can drop into Agent builds—making the secure path the easy path
• Instrument AI platforms to detect anomalous behavior, access patterns, and policy violations
• Build the detection layer, not just consume it

AI SecOps Engineer

• Monitor and manage the Information Security request queue, including analysis and resolution of outstanding issues.
• Manage endpoint and network security environments including overall health, policy modifications, troubleshooting/resolving issues and producing monthly health metrics for workstations, servers, and identities.
• Work directly with the Information Security Team and Security Operations Center (SOC) to analyze and resolve security events/alerts. This includes some monitoring and management of the SIEM platform.
• Manage and maintain Information Security training and awareness campaigns (e.g., training, phishing). Developing/monitoring campaigns, ensuring required training is complete, producing reports/metrics and recommending improvements to the current process.
• Conduct internal security control testing. Includes gathering, uploading, and reviewing evidence within the GRC (Governance, Risk and Compliance) tool. Supporting PCI, SOC and related audits.
• Other duties as assigned.

Engineer, IT Information Security Operations

• Plans, organizes, and directs the activities of regional and on-site security managers
• Ensures compliance with legal and regulatory requirements
• Collaborates with corporate security management and facility service staff
• Implements procedures for visitor controls and associate identification
• Briefs senior and executive management on security issues and compliance
• Develops and recommends policies, procedures, and standards
• Hires, trains, coaches, and evaluates performance of direct reports

Director of Security Operations

• Actively participate in 24x7 operations of the Long View Security Operations Centre
• Monitor, identify and validate security events generated from Security Information Event Management (SIEM) tools
• Actively work in monitoring, event and incident management tools like Sentinel and ServiceNow
• Respond to critical business impacting situations and coordinate the efforts required to engage the proper resources to remediate the issue
• Coordinate major security incident situations and provide internal communications via email in a timely manor
• Provide general support for Security Information Event Management (SIEM) tool changes, tweaks, additions and updates within Sentinel and any additional tools leveraged by Long View
• Provide security guidance to team members across the organization how to best identify, contain and remediate security related incidents
• Understand complex issues across on-premise, public and private cloud solutions and articulate the impact to higher tier team members
• Follow and establish process documentation for receipt of security alerts for monitored devices, acknowledge the receipt of the event, opening and/or updating service desk tickets to track the handling of events to resolution and closure, assignment of the ticket to the appropriate owner
• Work with cloud technologies like Azure, AWS and Google Cloud Platform
• Fulfill reporting requests that can be pulled from Long View tools

Junior Security Operations Center Analyst

• Support vulnerability management operations
• Analyze security scan results
• Coordinate operating system and third-party patch deployment
• Support malware assessment and remediation efforts
• Maintain security compliance documentation
• Administer MECM patching activities

IT Security Operations Analyst

• Define and evolve Adobe’s Cyber Operations strategy, building a proactive and resilient cybersecurity framework
• Lead transformation across automation, data platforms, and security solutions strengthened by smart technology systems
• Align CyberOps priorities to business strategy, enabling customer trust and innovation
• Shape a scalable operating model across Enterprise Security, Cyber Defense, and Security Engineering
• Own end-to-end cyber defense including detection, response, vulnerability management, identity, and endpoint security
• Ensure global consistency and readiness in incident response
• Strengthen monitoring and visibility for real-time response capabilities
• Drive operational excellence through metrics, dashboards, and continuous improvement
• Lead decisively through high-severity incidents

VP, Cyber Operations

• Lead in daily SOC operations and provide task management and operational oversight.
• Manage user accounts, roles, and permissions across application portfolio.
• Monitor and report on system health concerns for alarms access control, surveillance, incident management and other security systems.
• Supervise the Security Operations team to ensure seamless and continuous GSOC support.
• Validate that operator actions align with runbook and site-specific requirements.
• Coordinate with site security, facilities, REFM, IT, HR, Legal, Comms, and business leadership as required to handle Crisis events.
• Assume Incident Commander role for Crisis-level incidents per escalation policy.
• Maintain a communication cadence during evolving incidents and crisis events as needed.
• Support operators in compiling situational reports and incident summaries.
• Ensure timely triage, categorization, and prioritization of alerts and cases.
• Provide oversight of incident documentation workflows, proper escalation channels and resolutions.
• Coordinate production and delivery of emergency notification and mass communications.
• Conduct post crisis/incident reviews to identify process improvements.
• Assist in creating, updating, and conducting training material with GSOC Operators.
• Assist in onboarding new GSOC staff and training to include tools, procedures, policies, escalation expectations.

Supervisor – Security Operations Center

• Design, develop, and refactor our custom internal security platform across both the backend (FastAPI) and frontend(React).
• Partner with security analysts to turn manual workflows into automated, reliable processes.
• Integrate and operationalise AI/ML utilities (such as LLMs) into our security platform to assist analysts with threat investigation and incident summarisation.
• Work with our infrastructure in GCP, using Kubernetes for orchestration and Terraform for resource management.
• Leverage our monitoring and alerting tools (Prometheus/Grafana) to detect failures early and maintain high availability across the internal security platform the team owns.
• Build and maintain API integrations that connect our detection tools, ticketing systems, and customer environments.
• Champion code quality through code reviews, testing practices and CI/CD pipelines.

Senior CSOC Engineer

• Design, develop, and maintain security-focused platforms using scripting languages, C++, and Rust.
• Implement modern development processes (CI/CD, DevOps, Agile) to ensure efficient and reliable delivery.
• Build scalable solutions across Linux-based environments and cloud-native architectures.
• Integrate diverse systems using APIs, webhooks, and other communication protocols.
• Develop and maintain integrations with AI-driven tools and data enrichment platforms to enhance SecOps capabilities.
• Collaborate with SecOps teams to design and implement advanced monitoring, detection, and response solutions.
• Troubleshoot complex systems and resolve performance, reliability, and security issues.
• Architect and manage cloud-based environments (AWS, Azure, GCP) with a focus on security and scalability.
• Optimize Linux OS and kernel-level configurations for performance and resilience.
• Automate infrastructure provisioning and configuration management.

Senior Cybersecurity Engineer – Security Operations

• Overseeing and monitoring multiple feeds in a 24/7 environment to detect, verify, and respond to cyber threats
• Collaborating with multiple teams and personnel, including other SOC analysts and subject matter experts
• Participating in red-team/blue-team simulated attacks and tabletop exercises
• Partnering with Security Design and Architecture Engineers to implement and improve technology and processes to enhance SOC monitoring, investigation, and response capabilities

Senior SOC Analyst – 2ND/3RD SHIFT

• Monitor security alerts and events in the Security Operations Center (SOC) and perform initial triage, analysis, and escalation as needed.
• Investigate potential security incidents using SIEM, endpoint, network, and other security tools to determine scope, impact, and next steps.
• Document findings, actions taken, and incident details clearly and accurately in accordance with SOC procedures and reporting requirements.
• Escalate confirmed or high-risk incidents to senior analysts or incident response teams when appropriate.
• Support threat detection, alert tuning, and ongoing improvement of SOC monitoring processes and playbooks.
• Collaborate with internal teams to gather information, support investigations, and help protect enterprise systems and data.
• Stay current on common cyber threats, vulnerabilities, and attacker tactics, techniques, and procedures (TTPs).

SOC Analyst, Tier 1

SOC Analyst – Shift Lead

SOC Analyst, Tier 2

• Assist in monitoring and analyzing security events and incidents
• Participate in threat hunting activities to identify potential security threats
• Support incident response efforts, including investigation, containment, and remediation
• Conduct research on emerging cybersecurity threats and vulnerabilities
• Assist in the development and implementation of security operations policies and procedures
• Collaborate with other team members to improve security posture and incident response capabilities

Cybersecurity Intern, Security Operations

• Align security processes, policies, and procedures with established security standards and operational goals
• Collaborate with the Patch Management Team to support enterprise security and compliance initiatives
• Assess malware activity and evaluate potential impacts to systems, infrastructure, and operations
• Review vulnerability scan results to identify security risks and prioritize remediation efforts
• Analyze infrastructure configurations and security controls to ensure compliance with organizational policies and practices
• Manage the distribution and deployment of Microsoft operating system patches across the enterprise environment
• Deploy third-party software patches using Enterprise Lifecycle Management Services (ELMS) and Microsoft Endpoint Configuration Manager (MECM)
• Monitor patching activities to verify successful installation, compliance, and system stability
• Investigate security findings and recommend corrective actions to reduce vulnerabilities and strengthen system security
• Support continuous improvement of security operations by identifying opportunities to enhance patch management, vulnerability management, and compliance processes

• Independently lead multiple technical engagements simultaneously, ensuring timely delivery of measurable security outcomes and operational improvements across client environments
• Convert client business requirements into actionable technical strategies and capabilities that align with security objectives and deliver measurable value
• Collaborate with internal teams and clients to design strategic roadmaps and execute plans that advance operational maturity and security posture
• Drive service maturity by analyzing KPIs, SLAs, and performance trends to deliver actionable insights and continuous value improvements
• Evaluate and align security solutions and recommendations with client requirements, risk profiles, and strategic objectives to ensure optimal fit and effectiveness
• Assist in the documentation of business requirements, use cases, and ROI analyses to support informed decision-making and demonstrate value
• Act as a technical advisor during pre-sales and post-sales engagements, ensuring solution alignment and client confidence
• Provide technical expertise for proposals, contracts, and service descriptions to ensure accuracy and alignment with client needs
• Recognize and recommend cross-sell and up-sell opportunities across AFC services
• Lead or support security initiatives from planning through execution
• Apply hands-on expertise to operationalize threat intelligence across EDR, SIEM, SOAR, and related domains, improving detection and response capabilities
• Analyze patterns and anomalies to identify potential advanced threats and recommend proactive mitigation strategies
• Conduct architectural reviews and provide recommendations to strengthen security, posture and operational efficiency
• Assess and recommend custom detection logic, automation, or tool enhancements to address evolving threats and operational needs
• Assist with platform configurations, detection logic, automation improvements
• Build and develop relationships with internal and external stakeholders
• Identify and assess project risks, developing mitigation strategies to ensure successful delivery and minimize impact
• Validate project scope and deliverables to ensure alignment with client expectations and contractual obligations
• Represent Optiv in client meetings, delivering clear technical guidance and executive-level communication
• Collaborate with team members to identify issues, develop strategies, and drive continuous improvement
• Provide support for projects spanning multiple functional groups by identifying collaborative opportunities, enhancing existing deliverables, and strengthening Optiv’s value to our clients
• Ensure projects are delivered on time, within budget, and to quality standards, meeting or exceeding client expectations

See all jobs on JobTailor

SOC Analyst Tier 2

SOC Analyst Tier 1

Principal Modem SoC Engineer

Security Operations Engineer

AI SecOps Engineer

Engineer, IT Information Security Operations

Director of Security Operations

Junior Security Operations Center Analyst

IT Security Operations Analyst

VP, Cyber Operations

Supervisor – Security Operations Center

Senior CSOC Engineer

Senior Cybersecurity Engineer – Security Operations

Senior SOC Analyst – 2ND/3RD SHIFT

SOC Analyst, Tier 1

SOC Analyst – Shift Lead

SOC Analyst, Tier 2

Cybersecurity Intern, Security Operations

IT Security Operations Analyst

Cyber Operations Advisor