Cybersecurity Operations Analyst/Engineer

Ariento; Franklin (TN); On-site; USD 80,000 - 120,000; Full time

Benefits offered by this job

401(k)

Health

Dental

Vision

Profit Sharing

PTO

Education Reimbursement

Job summary

Ariento is seeking a Cybersecurity Operations Analyst/Engineer to join our Franklin, TN team. The role is full-time and onsite, focusing on monitoring, detection, analysis, and response to cybersecurity threats within a SOC. You will help align security with frameworks like NIST 800-171 and CMMC.

The position requires a Bachelor's degree, eligibility for tier 3 clearance, and the ability to commute or relocate to Franklin. Experience with Microsoft 365 administration is preferred.

Qualifications

• Bachelor's degree required.
• Eligible for tier 3 security clearance.
• Must be able to commute to Franklin, TN 37064 or relocate before starting work.
• Experience with Microsoft 365 administration.

Responsibilities

• Follow SOC workflows, performance metrics, and service delivery KPIs.
• Serve as escalation point for critical incidents and coordinate cross-functional response.
• Conduct vulnerability scans to identify and remediate vulnerabilities across the tech stack.
• Investigate, contain and remediate security events.
• Refine detection rules, playbooks, and response procedures.
• Conduct threat intelligence and vulnerability management.
• Execute and maintain security and compliance monitoring and audit functions.
• Support audits aligned with NIST 800-171, CMMC, and other standards.
• Communicate incident details and SOC updates to stakeholders.
• Support onboarding of new SOC clients, including tuning and baselining.
• Collaborate with support and development teams on security initiatives.
• Identify opportunities to improve SOC effectiveness, automation, and efficiency.
• Contribute to service maturity, including documentation, KPIs, and operational standards.

Skills

Cybersecurity monitoring

Incident response

Vulnerability management

Microsoft 365 administration

Education

Bachelor's Degree

Tools

Sumo Logic

Defender

Microsoft 365

Job description

Job Title: Cybersecurity Operations Analyst/Engineer

Job Type: Full-Time, In-Person (Onsite Required) - Franklin, TN

Benefits

• 401(k)
• Health
• Dental
• Vision
• Profit Sharing
• PTO
• Education Reimbursement

Position Overview

The cybersecurity operations analyst is a part of our Security Operations Center team responsible for monitoring, detection, analysis, and response to cybersecurity threats. This role assists with security monitoring of our customers and alignment with compliance frameworks such as NIST 800-171 and CMMC.

Key Responsibilities

Leadership & Operations

• Follow SOC workflows, performance metrics, and service delivery KPIs.
• Serve as the escalation point for critical incidents and coordinate cross-functional response.
• Conduct vulnerability scans to identify and remediate vulnerabilities across the technology stack.

Technical & Incident Response

• Investigate, contain and remediate security events
• Use SIEM, EDR, SOAR, and threat intelligence tools (e.g., Sumo Logic, Defender, Microsoft 365).
• Refine detection rules, playbooks, and response procedures.
• Conduct threat intelligence and vulnerability management.

Compliance & Audit Readiness

• Execute and maintain security and compliance monitoring and audit functions.
• Support internal and client audits aligned with NIST 800-171, CMMC, and other standards.
• Perform audit and control functions, ensuring separation of duties and documentation integrity.
• Support Client audits by providing artifacts and being interviewed.
• Maintain audit documentation and artifacts

Stakeholder Engagement

• Communicate incident details and SOC updates to internal and external stakeholders.
• Support onboarding of new SOC clients, including tuning and baselining.
• Collaborate with support and development teams to support broader security initiatives.

Program & Process Improvement

• Identify opportunities to improve SOC effectiveness, automation, and efficiency.
• Contribute to service maturity, including documentation, KPIs, and operational standards.
• Conduct disaster recovery and incident response drills.

Required Qualifications

• Bachelor's Degree
• Eligible for a tier 3 security clearance
• Ability to Commute to Franklin Office - Franklin, TN 37064 or Ability to Relocate Franklin, TN 37064: Relocate before starting work (Required)
• Experience with Microsoft 365 administration

Preferred Skills & Certifications

• Hands-on experience with cybersecurity assessment/audits.
• Experience with regulated environments (e.g., DoD, DFARS/CMMC, NIST 800-171).
• Understanding of SIEM/EDR technologies, detection logic, and investigative methodologies.
• Experience with technical documentation. (runbooks, diagrams, security controls, system security plans, accreditation packages, etc.)
• Familiarity with MDR/SOC service environments.
• Certifications: CMMC Certified Assessor (CCA), CMMC Certified Professional (CCP)