Security Analyst, Observability and Operations

Security Analyst, Observability and Operations supports secure, reliable operation across agentic and automated workflows in the gTech ecosystem. You will monitor security outcomes end to end, run day-to-day threat hunting, and lead incident triage through to coordinated handoffs, while feeding operational intelligence back into the engineering roadmap.

Work model: Onsite in Atlanta, GA. Compensation: USD 123,000 to 176,000 per year.

How you’ll contribute: this role acts as an observability and feedback engine, helping ensure autonomous remediations and agentic workflows operate securely and effectively. You’ll also manage operational fallback tiers when automated workflows require human escalation.

Responsibilities

• Monitor agentic and automated flows, triage edge cases, and manage operational fallbacks when workflows require human escalation.
• Run day-to-day threat hunting and perform advanced log analysis using SQL and a Business Intelligence Platform.
• Triage data transfer and access alerts, including access alert monitoring and audit permission mapping.
• Verify the efficacy of automated provisioning tools by validating access outcomes and control behavior.
• Serve as triage lead for the gTech ecosystem by monitoring incident queues, conducting initial forensic analysis, and orchestrating handoffs with central Detection and Response (D&R) teams.
• Validate false positives, triage legacy issues, and track remediation velocity to align with global service level objective timelines.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or equivalent practical experience.
• 5 years of experience in security operations (SOC), incident response, threat hunting, IT compliance, or equivalent.
• Experience with log analysis, data querying (SQL), or monitoring security controls.

Preferred Qualifications

• Experience coordinating cross-functional security incidents.
• Familiarity with Google data analysis infrastructure (for example, business intelligence platforms).
• Understanding of common security frameworks, access governance models, and the vulnerability management life-cycle.
• Ability to translate operational security findings into technical engineering requirements.

Technologies: SQL, Business Intelligence Platform.