[Hiring] Senior Cyber Operations Analyst @CDM Smith

Role Description

The Senior Cyber Operations Analyst is an experienced team member responsible for monitoring, detecting and responding to cybersecurity threats and incidents in a fast-paced environment. This role requires advanced skills in analyzing, triaging and resolving investigations and incidents.

• Use a combination of commercial and open-source tools, including AI-powered solutions, to automate repetitive tasks, enhance threat detection and improve response effectiveness.
• Correlate alerts and events, execute queries and apply behavior-based and anomaly detection techniques to support timely response actions.
• Experience across multiple technologies, including SOARs, SIEMs, MCP solutions, endpoints, applications, network devices, cloud infrastructure and threat intelligence feeds.
• Support escalation workflows, assist less experienced analysts, and handle complex incidents.
• Mentor junior team members to strengthen overall team capability.
• Identify opportunities to use automation technologies & AI to automate repetitive tasks.
• Operate in a cross-functional capacity, working across diverse technologies to support and secure business operations.
• Apply critical thinking and serve as the human in the loop when using AI-enabled tools and making security decisions.
• Strong communication skills are essential, along with the ability to understand and respond to emerging cybersecurity threats at scale.
• Report to the manager or director of security operations.

Qualifications

• Bachelor's degree.
• 6 years of related experience.
• Equivalent additional directly related experience will be considered in lieu of a college degree.
• Domestic and/or international travel may be required.

Requirements

• Experience in SOC monitoring and response or related experience.
• Working knowledge of ML and AI, as well as their application in security operations.
• Experience using NLP, query construction and AI-powered tools to analyze logs, threat intelligence and incident data.
• Experience using MCP servers and purpose-built agents to support investigation and response activities.
• Hands-on experience with AI assistants and platforms for investigation, security analysis and response.
• Demonstrated technical understanding of emerging cybersecurity threats, including adversary use of AI.
• Ability to develop detections aligned with the MITRE ATT&CK framework and relevant open-source AI frameworks.
• Proficient in scripting languages such as Python, Bash, JavaScript or PowerShell, as well as experience with KQL.
• Experience with SOAR, SIEM, threat intelligence platforms, identity systems, sandboxes, vulnerability management and EDR/XDR tools.
• Strong understanding of threats, vulnerabilities, and incident response principles.
• Familiar with one or more frameworks or regulations, such as CMMC, NIST CSF, CIS, GDPR, CCPA.
• Strong judgment and ability to make timely decisions in complex situations.
• Experience with Azure, AWS, and GCP. Bonus points for Gov Cloud deployments.
• Experience managing/collaborating with MSSPs.
• Exceptional written and verbal communication skills across multiple levels of the organization.
• Strong analytical and problem-solving skills, with the ability to evaluate complex issues and recommend practical solutions.
• Highly organized and efficient, with the ability to manage multiple priorities and meet deadlines in a fast-paced environment.
• Ability to apply both strategic and tactical thinking to support effective security operations and continuous improvement.
• Ability to remain calm and focused under pressure while managing time-sensitive priorities and deadlines.
• Effective decision-making skills in complex and time-sensitive situations.

Benefits

• We attract the best people in the industry, supporting their efforts to learn and grow.
• We strive to create a challenging and progressive work environment.
• We provide career opportunities that span a variety of disciplines and geographic locations.