Lead Security Operations Analyst - AI-Driven MSSP Lead

Wursta; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Wursta is seeking a Lead Security Operations Analyst for its MSSP team. You will oversee real-time threat monitoring, incident response, and SLA delivery across multi-tenant client environments, serving as the Tier-3 lead and driving AI-enhanced detection and automation.

You'll architect automated escalation workflows, build integrations with security tools, and apply frameworks like MITRE ATT&CK and NIST CSF to maintain compliant, scalable security operations across cloud environments.

Qualifications

• Experience in at least one security category per the listed tool/tech areas.
• Familiarity with SIEM/XDR platforms and cloud security architectures.
• Ability to design automated incident response playbooks and SOAR workflows.

Responsibilities

• Lead real-time threat monitoring, incident response, and SLA enforcement across multi-tenant environments.
• Act as Incident Commander during critical events following established guides (e.g., NIST SP 800-61r2).
• Develop AI-driven detection, escalation workflows, and integration with backend MSSP platform.

Skills

SIEM/XDR platforms

Network telemetry

AI & automation tools

SOAR & scripting

Threat frameworks

Cloud security

Education

GIAC/GCIH/GMON/GNFA

CompTIA/CYSA+ or OSCP

CISSP (preferred)

Tools

Python

Node.js/Go

REST APIs

GitHub Copilot

Docker

Job description

Wursta is seeking a Lead Security Operations Analyst for its MSSP team. You will oversee real-time threat monitoring, incident response, and SLA delivery across multi-tenant client environments, serving as the Tier-3 lead and driving AI-enhanced detection and automation.

You'll architect automated escalation workflows, build integrations with security tools, and apply frameworks like MITRE ATT&CK and NIST CSF to maintain compliant, scalable security operations across cloud environments.