Security Operations

• Implement technical systems and monitor them for unusual and suspicious activity across a wide range of products.
• Perform “on call” rotation for investigating alerts escalated by the MDR provider, other IT teams, or security tool alerts.
• Assist with articulating security configuration standards for systems and business applications.
• Participate in technical and non-technical projects requiring information security oversight and to ensure policies, procedures and standards are met.
• Serve by aiding in incident response (IR) with the IR and security operations center (SOC) teams.
• Interface with internal and external auditors, along with Compliance team members, for risk assessments as necessary, while providing information requested in a timely manner.
• Recommend new security solutions as well as effective improvements to existing security controls that do not negatively impact business innovation.
• Serve as a liaison for the security team.
• Provide weekly reports to leadership to account for project updates, along with other misc. updates regarding the Security Operations.
• Perform other duties as assigned.

Security Operations Analyst

• The Senior Director, Corporate IT & Cybersecurity Operations serves as Lynker Corporation's senior-most functional leader for enterprise information technology infrastructure, cybersecurity, and technology governance.
• This position is integral to the Company's ability to operate as a compliant, resilient, and mission-capable Government contractor across civilian, defense, and national security markets.
• The incumbent owns the design, implementation, and continuous improvement of IT and cybersecurity programs aligned to CMMC 2.0, CMMI, FAR, and DFARS requirements, and is accountable for the confidentiality, integrity, and availability of Lynker's enterprise systems.
• The role carries direct ownership of business continuity and Continuity of Operations (COOP) planning, Decision Analysis Report (DAR) governance for internal systems, enterprise systems implementation lifecycle management, mandatory compliance training administration, and IT-related onboarding/offboarding artifact control.
• The Senior Director partners with Human Resources, Contracts, Finance, Quality Assurance, and Executive Leadership to ensure that technology strategy, risk posture, and regulatory obligations remain fully aligned as Lynker expands its footprint into Department of Defense (DoD) and national security work.
• Prior experience support a Government Contracting Organization or a Government Agency a plus. Prior Military service highly desired.

Senior Director – Enterprise IT, Cybersecurity Operations

• Be the go-to operational partner for our VP of North America Sales, frontline managers, and reps.
• Run the cadence that keeps the business honest: pipeline hygiene reviews, forecast call preparation and follow-through.
• Debug and resolve process breakdowns as they happen.
• Maintain a daily pulse on pipeline health, forecast accuracy, and key KPIs.
• Identify operational gaps and bring the field's usage perspective to workflow design.
• Push RevOps initiatives into the field and carry field feedback back.

Revenue Operations Manager

• Provide “eyes on glass” near real-time security monitoring in a 24x7 environment by monitoring security infrastructure and security alarm devices for Indicators of Compromise utilizing a proprietary SIEM and cybersecurity tools;
• Perform near real-time security monitoring of alerts and escalating critical alerts in compliance with the service level agreement;
• Detect security incidents and analyze threats for complex and/or escalated security events;
• Perform level 2 assessment of incoming alerts (assessing the priority of the alert, determining severity of alert in respect to customer environment, correlating additional details) and coordinate with Tier-3 for critical priority incidents, if necessary;
• Perform incident response activities utilizing customer SIEM and cybersecurity toolkits;
• Respond to customer Requests For Information including using Linux command line skills to query raw logs for IOCs, answering questions about the MSS infrastructure, and features of the SIEM including correlation engine while recommending best practices;
• Develop internal and/or external documentation, such as detailed procedures, playbooks, and runbooks; review and assess reports concerning operational metrics;
• Assist with quality control during onboarding of new customers to verify validity of Use Cases and generated alerts;
• Utilize the SOC Knowledge Base and provide input on revisions as needed

Public Sector SOC Analyst

• Serve as the enterprise technical authority for security orchestration across Splunk SOAR and Tines
• Define and evolve the long‑term architecture, strategy, and roadmap for SOAR and automation platforms
• Establish enterprise standards, reusable frameworks, and orchestration patterns to drive consistency and scale
• Lead end‑to‑end design authority for complex, cross‑platform automation initiatives
• Partner with Product Management and senior leadership to shape portfolio prioritization and strategic investments
• Drive intake governance model, ensuring automation demand is evaluated, prioritized, and aligned to measurable outcomes
• Define and track enterprise value metrics (MTTR reduction, analyst efficiency, operational risk reduction, automation coverage)
• Influence and guide multiple security domain teams (15+ teams) to adopt standardized automation patterns and best practices
• Provide technical leadership and mentorship to senior and principal engineers across SOAR platforms
• Act as escalation point for high‑risk, high‑complexity orchestration challenges and systemic platform issues
• Lead design and oversight of enterprise integrations, including but not limited to: Microsoft Graph / Entra ID / M365 Defender, CrowdStrike Falcon, Tanium, BloodHound, Anvilogic, ThreatQ, ServiceNow (Incidents, SecOps, CMDB, IR workflows)
• Drive platform reliability, resilience, and auditability standards across all automation implementations
• Define enterprise vision for AI‑driven security operations, including copilots, agents, and MCP‑aligned orchestration
• Lead design of AI‑assisted investigation, triage, and response workflows integrated with SOAR decisioning
• Establish and enforce enterprise AI governance framework, including: Human‑in‑the‑loop approval models and escalation paths, Deterministic fallback and fail‑safe execution patterns, Access controls, observability, logging, and auditability aligned with enterprise risk standards
• Define architectural patterns for AI‑integrated SOAR systems, including: Retrieval‑Augmented Generation (RAG) design and secure knowledge integration, Vector embedding strategies for semantic search and correlation, Scalable data pipelines for incident context, detections, and response history
• Evaluate and approve AI use cases based on operational value, risk, and production readiness
• Partner with governance, risk, and compliance teams to ensure safe, auditable deployment of AI capabilities.

Security Incident Response Lead

• Work closely with system owners to ingest new log feeds for security monitoring
• Enhance and maintain our Detection and Response platforms
• Build in workflows with AI analysis to automatically investigate and triage issues
• Be on the frontlines of Incident Response, actively investigating issues and protecting Upstart
• Build common response workflows to expedite investigation and response using AI and SOAR Technology

Security Operations Engineer II

• Process initial, additional, and reopen reemployment assistance claims.
• Performs specialized work assignments and other related work as required within the units including but not limited to work search audits, eligibility reviews, job service registration, potential issues, rejected weeks, and/or returned employer notices.
• Determines issues, concerns, and/or complaints from claimants, employers, and other customers.
• Access and research necessary records to either resolve those issues or refer to a specific or appropriate program specialist or supervisor.
• Explains points of law and reasons for determinations regarding eligibility for reemployment assistance benefits.
• Research and explain the reemployment assistance program at the request of callers and direct them to the appropriate place to file a claim.
• Refer to various community resources and to One-Stop centers as appropriate.

Employment Security Representative I

• Support development, improve proficiency, and increase operational effectiveness of USSF Cyber Squadron personnel
• Provide cyber defense remediation and mitigation implementation recommendations in support of all incidents/events
• Participate in the planning process for Operational Planning Teams (OPTs) and crew shift planning
• Draft and validate accuracy of squadron level DCO Tactics, Techniques, and Procedures (TTPs)
• Conduct analysis on new DCO-Space capability releases
• Provide recommendations for exercises and mission rehearsals
• Maintain proficiency by performing DCO crew operation for assigned space mission systems
• Provide expertise for DCO-Space capabilities such as SIEM, Intrusion Detection and Prevention Systems, ELK Stack, Endpoint Protection Systems
• Advise and assist with cyber incident response processes IAW squadron policies
• Participate in Government-established Cyber Incident Response Teams (CIRTs) and provide technical assistance
• Recommend cyber incident response best practices to improve TTPs, processes, and policies

Defensive Cyber Operations SME

• Lead the retail security operating model for company-owned stores while providing governance, advisory support, standards alignment, escalation coordination, and risk visibility for branded partner locations.
• Build and mature enterprise governance structures, operational processes, reporting frameworks, standards, and accountability models.
• Oversee key retail security programs, including guard force operations, cash logistics, alarm systems, video management, and asset protection technologies.
• Establish performance metrics, dashboards, scorecards, and executive reporting that provide visibility into security risks, loss trends, compliance, vendor performance, and operational effectiveness.
• Coordinate cross-functional response and escalation for retail security incidents, operational risks, vendor issues, and emerging threats.
• Drive vendor performance through service-level expectations, scorecards, governance routines, and continuous improvement initiatives.
• Partner closely with Retail Operations, Supply Chain, Finance, Audit, regional teams, branded partner stakeholders, and business leaders to strengthen controls, improve store readiness, and reduce risk.
• Support investigative teams through operational coordination, reporting, and process enablement without assuming primary responsibility for investigations.
• Influence outcomes across a highly matrixed environment through partnership, governance, relationship management, and executive alignment rather than direct authority.
• Support branded partner locations through influence, advisory support, standards alignment, and relationship-led governance rather than direct operational control.

Director, Retail Security Operations

• Join our Cyber Security Operations Center (CSOC)
• Analyze network protocols and infrastructure
• Conduct log investigation and incident handling
• Identify and stop malicious actors targeting Capital One's infrastructure
• Train and mentor teammates

Cyber Security Operations Center Analyst

• Lead and evolve our U.S. information security program, including security policies, compliance initiatives, and risk management.
• Lead our SOC 2 certification efforts and support ongoing alignment with ISO 27001 standards, including gap assessments, control implementation, audit preparation, and documentation.
• Develop, maintain, and update information security policies, procedures, and audit-ready documentation.
• Partner with our global security team to align on security standards, frameworks, and company-wide initiatives.
• Build and deliver a security awareness training program, including phishing simulations, and conduct periodic security assessments.
• Serve as the internal security expert by responding to customer security questionnaires, supporting enterprise sales opportunities, and partnering with the Sales and Solutions Engineering teams on security-related requests.
• Own and manage our Mobile Device Management (MDM) platform, including device enrollment, encryption, compliance, and lifecycle management.
• Manage identity and access management, including user provisioning, access governance, and regular access reviews across business systems.

IT Operations, Security Manager

• Provide advanced operational support for cybersecurity platforms and services
• Investigate and resolve escalated platform and service issues
• Act as an Incident Manager during major incidents with cybersecurity platforms
• Develop and maintain operational runbooks and SOPs
• Validate monitoring, alerting, and service ownership for newly onboarded services
• Support cloud and hybrid platform operations across AWS, Azure, and Google Cloud Platform

Cyber Tech Operations Engineer, Level 2

• Monitor and triage security alerts and events generated by enterprise security tools, escalating validated or high-risk activity in accordance with established playbooks and service level targets.
• Perform initial investigation of suspicious activity across endpoint, network, identity, email, cloud, application, and system log sources.
• Analyze and investigate data in the SIEM/SOAR that originated from EDR, firewall, proxy, intrusion detection/prevention, email security, and other monitoring platforms to determine severity, impact, and required response actions.
• Document investigations, findings, actions taken, and escalation details in the case management system with clear, complete, and timely notes.
• Follow shift handoff procedures and communicate open issues, emerging threats, and significant events to team members and incident handlers.
• Contribute to continuous improvement by identifying recurring false positives, process gaps, and opportunities to improve alert quality, runbooks, and analyst efficiency.

Cybersecurity SOC Analyst

• Designing and implementing secure architectures across cloud environments, embedding zero-trust principles and identity-based access controls.
• Managing threat detection, vulnerability assessments, and penetration testing to identify and remediate risks proactively.
• Leading incident response and leveraging threat intelligence to detect, contain, and prevent evolving cyber threats.
• Ensuring compliance with global security standards (ISO 27001, NIST 800-53, CIS, OWASP, SOC 2, CSA) and continuously improving Collibra’s security posture.
• Supporting internal and external security audits by providing necessary documentation and evidence.

Engineer, Security Operations – Engineering

• Contribute to sales strategy and consultative discovery
• Drive XSIAM revenue across all segments
• Initiate executive relationships with prospective customers
• Demonstrate the business value of XSIAM
• Craft customer-specific proposals and business cases
• Collaborate across sales teams to achieve synergies

SecOps Transformation Advisor

• Lead day-to-day SOC operations across cloud and on-prem environments
• Serve as Incident Commander for major security incidents
• Drive AI-powered security operations, automation, and threat detection initiatives
• Lead detection engineering, threat hunting, and response improvements
• Own and optimize SIEM, SOAR, EDR/XDR, and threat intelligence platforms
• Develop incident response plans, playbooks, and automation workflows
• Partner with IT, Cloud, Risk, and Compliance teams to strengthen security posture
• Mentor and develop SOC analysts and security engineers

Manager, Security Operations

• Support the identification and remediation of OT vulnerabilities and misconfigurations in alignment with internal prioritization and remediation guidelines
• Collaborate with manufacturing sites, engineering teams, and cybersecurity teams to improve OT security posture
• Assist with vulnerability scanning and assessment activities across OT assets, applications, and infrastructure
• Monitor and analyze potential cyber threats and escalate issues to senior team members or incident response teams as appropriate
• Support threat analysis and threat hunting activities under guidance from senior analysts
• Assist in preparing reports and communications on OT risk, vulnerabilities, and remediation progress
• Support OT cybersecurity governance, metrics, and reporting activities within the Cyber Fusion Center
• Utilize enterprise tools (e.g., ServiceNow) to track and manage vulnerability remediation tasks
• Execute cyber hygiene activities across manufacturing environments, including asset inventory validation, patching coordination support, backup validation checks, endpoint hardening activities, account and access reviews, and identification of unnecessary services or network communications
• Support implementation and maintenance of baseline OT security controls such as network segmentation, firewall rule hygiene, and secure remote access
• Participate in continuous improvement initiatives and help identify opportunities for automation and process enhancements

Associate Specialist, Cybersecurity Operations

• Own and maintain detection coverage aligned to the Cyderes Rule Set
• Lead tuning and optimization of detection rules across SIEM platforms
• Identify, prioritize, and remediate detection gaps
• Execute and guide retrohunt activities to validate detection effectiveness
• Identify gaps in client visibility that directly impact detection capability
• Provide clear, detection-focused recommendations for improving coverage
• Validate whether existing data supports required detection use cases
• Own the technical account relationship for assigned clients
• Lead technical cadence calls focused on detection performance, gaps, and outcomes
• Translate technical findings into risk-based, business-relevant insight
• Support and lead response efforts for security incidents
• Provide detection-focused expertise during investigations
• Identify detection improvements based on real-world incident learnings
• Partner with SOC and DFIR teams during escalations as needed

Operations Advisor, Cyber Defense Operations

• partner with the SVP/GM Splunk Security on medium- and long-term planning
• lead annual and quarterly planning cycles
• identify and implement initiatives to create efficiency
• own the design and execution of the organization's operating rhythm
• manage budget status and tracking
• act as a trusted advisor across the leadership team
• define and track indicators, build executive-ready dashboards
• drive the process to establish business objectives
• prepare strategic narratives and organizational communications
• lead high-priority initiatives on behalf of the SVP/GM Splunk Security

Security Operations jobs in United States

See all jobs on JobTailor

Security Operations Analyst

Senior Director – Enterprise IT, Cybersecurity Operations

Revenue Operations Manager

Public Sector SOC Analyst

Security Incident Response Lead

Security Operations Engineer II

Employment Security Representative I

Defensive Cyber Operations SME

Director, Retail Security Operations

Cyber Security Operations Center Analyst

IT Operations, Security Manager

Cyber Tech Operations Engineer, Level 2

Cybersecurity SOC Analyst

Security Operations Engineer II

Engineer, Security Operations – Engineering

SecOps Transformation Advisor

Manager, Security Operations

Associate Specialist, Cybersecurity Operations

Operations Advisor, Cyber Defense Operations

Senior Director, Business Operations – Splunk Security