Senior Security Analyst

Senior Security Analyst role on the Security Operations Center (SOC) team focused on threat monitoring, incident response, and AI/ML-enhanced detection using Google SecOps and Chronicle.

Responsibilities

• Monitor security alerts and events across the enterprise network using traditional tools and AI/ML-powered detection systems.
• Perform triage, investigation, and event correlation to assess severity and potential impact.
• Use Google Chronicle for threat intelligence and log analysis to improve visibility and incident insights.
• Apply AI to detect patterns, anomalies, and behaviors that may indicate security incidents, with a focus on reducing false positives and improving detection accuracy.
• Participate in on-call rotations and support team scheduling for critical incidents as needed.
• Investigate and analyze security incidents and breaches, using AI to automate initial analysis and strengthen threat hunting.
• Respond to incidents according to established procedures, including containment, eradication, and recovery.
• Conduct root cause analysis and forensic investigations to identify attack vectors and recommend mitigations.
• Leverage Google SecOps and Chronicle to centralize security data, correlate events, and speed up response workflows.
• Use machine learning approaches to identify emerging threats and trends and provide actionable guidance for response.
• Work with Google SecOps platform tools to streamline operations, improve threat visibility, and automate workflows.
• Collaborate with IT, Security, and Data Science teams to integrate Chronicle capabilities into the SOC.
• Optimize Chronicle for log management, threat hunting, and advanced analytics.
• Develop and maintain automated workflows for common security incidents using AI for intelligent decision-making and faster response.
• Automate routine SOC tasks including log analysis, incident classification, and threat intelligence enrichment via Google SecOps and Chronicle integrations.
• Create detailed incident and threat intelligence reports that integrate AI-driven findings.
• Prepare performance and security posture reporting for internal stakeholders, including highlights of AI-driven improvements and mitigation outcomes.
• Generate and present reports on threat trends and SOC operations for internal stakeholders and customers.
• Recommend security improvements and contribute to SOC playbook development.
• Share knowledge of AI-powered security techniques and Google SecOps tooling with SOC team members to improve detection and response capabilities.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent work experience.
• Relevant certifications are a plus (examples: CISSP, CISM, CEH).
• 4+ years of experience in a Security Operations Center (SOC) or similar security-focused role.
• Hands-on experience with security analytics, log management, threat hunting, and incident response.
• Interest in applying automation, artificial intelligence, and machine learning to cybersecurity tasks (threat detection, anomaly detection, security automation).
• Strong understanding of cybersecurity concepts and frameworks (examples: NIST, Mitre, ISO, Kill Chain).
• Experience with security tools such as IDS, SIEM, and security automation platforms.
• Proficiency in scripting languages for automation and integration (examples: Python, PowerShell).
• Knowledge of security technologies including firewalls, endpoint protection, IDS/IPS, and threat intelligence platforms.
• Strong analytical and problem-solving skills.
• Excellent communication skills for working with internal teams and external customers.
• Ability to work under pressure in a fast-paced, dynamic environment.

Preferred Skills

• Experience with SOAR (security orchestration, automation, and response) platforms.
• Exposure to cloud security platforms (examples: AWS, Azure, Google Cloud) and associated risks.
• Hands-on experience with Google SecOps and Chronicle for centralized threat intelligence and event correlation (preferred).
• Hands-on experience with Microsoft security platforms (examples: Sentinel, Defender) is a plus.

Technologies

• Google Chronicle, Google SecOps, AI, machine learning (ML)
• Python, PowerShell
• NIST, Mitre, ISO, Kill Chain
• SIEM, intrusion detection systems (IDS), IDS/IPS
• Firewalls, endpoint protection, threat intelligence platforms
• SOAR (security orchestration, automation, and response)
• AWS, Azure, Google Cloud
• Microsoft security platform (Sentinel, Defender)
• CISSP, CISM, CEH

Benefits

• Competitive salary and benefits package.
• Opportunity to work with cutting-edge AI-driven cybersecurity technologies and Google SecOps solutions.
• Collaboration with a team focused on continuously improving security operations.
• Growth and development culture with opportunities to expand knowledge in AI, cybersecurity, and emerging technologies.

Location: Overland Park, KS (onsite) | Experience: 4+ years