Sr SecOps Analyst

Full-time - Mid Level

Administrative and Support Services

About the position

The Sr SecOps Analyst is responsible for protecting the organization's digital infrastructure from cyber threats. This role involves analyzing and responding to complex security incidents, managing advanced security tools, and developing strategies to mitigate risks. The analyst will lead incident response efforts, monitor security alerts, and ensure compliance with security policies while mentoring junior analysts.

Responsibilities

• Monitor and analyze security alerts from various detection systems, including SIEM tools.
• Lead incident response efforts, conducting root cause analysis, containment, eradication, and recovery activities.
• Execute incident response playbooks.
• Tune alarms to minimize false positives.
• Prepare detailed reports on security incidents, trends, and recommendations for improvements.
• Identify gaps in detection coverage and manage the remediation plan.
• Develop and implement advanced detection techniques to identify potential threats, vulnerabilities, or attacks.
• Provide operational support for the overall risk management program.
• Measure and act on critical metrics focusing on continuous improvement to align with the risk management framework.
• Coordinate the resolution of cybersecurity risks by working with business and IT owners.
• Maintain thorough documentation of incidents, investigations, and outcomes.
• Provide executive summaries and briefings for senior management on the organization’s security posture.
• Oversee day-to-day security operations and guide junior analysts in managing security tools and responding to incidents.
• Perform regular threat hunting activities to proactively discover threats within the organization.
• Ensure compliance with security policies and procedures.
• Function as a liaison between security teams and other departments to promote security awareness and best practices.
• Mentor junior analysts and provide guidance on advanced security topics and tools.
• Conduct internal training sessions on emerging threats and mitigation strategies.
• Identify gaps in operational procedures and documentation and aid in closing them.
• Consult and facilitate with stakeholders on cybersecurity matters including projects and compliance with policies, procedures, standards, and additional guidelines.
• Keep abreast of the latest cybersecurity, privacy, and regulatory concerns and best practices.

Requirements

• Bachelor's degree in computer science, Information Security, or a related field.
• 5+ years of experience in cybersecurity or IT security roles.
• Proficiency in incident response, threat analysis, and vulnerability management.
• Strong understanding of network protocols, operating systems, and security technologies such as firewalls, IDS/IPS, EDR, and SIEM.
• Relevant certifications such as CISSP, CISM, CEH, or GIAC are highly preferred.
• Experience with regulatory compliance and security standards (e.g., NIST, ISO 27001, GDPR).