Remote Senior Cyber Operations Analyst — AI-Driven Defense

CDM Smith; Tallahassee (FL); Remote; USD 102,000 - 179,000; Full time

Job summary

CDM Smith is seeking a Senior Cyber Operations Analyst to join our security operations team. You will monitor, detect, and respond to cybersecurity threats across diverse environments, using AI-enabled tooling, ML, and SIEM/SOAR capabilities to automate and improve detection and response.

You will mentor junior analysts and help evolve playbooks and metrics in a fast-paced, cross-functional setting.

Qualifications

• Experience in SOC monitoring and response or related experience.
• Working knowledge of ML and AI, and their application in security operations.
• Experience using NLP, query construction and AI-powered tools to analyze logs, threat intelligence and incident data.
• Experience using MCP servers and purpose-built agents to support investigation and response activities.
• Hands-on experience with AI assistants and platforms for investigation, security analysis and response.
• Demonstrated technical understanding of emerging cybersecurity threats, including adversary use of AI.
• Ability to develop detections aligned with MITRE ATT&CK framework and relevant open-source AI frameworks.
• Proficient in scripting languages (Python, Bash, JavaScript, PowerShell) and KQL.
• Experience with SOAR, SIEM, threat intelligence platforms, identity systems, sandboxes, vulnerability management and EDR/XDR tools.
• Strong understanding of threats, vulnerabilities, and incident response principles.
• Familiar with frameworks/regulations such as CMMC, NIST CSF, CIS, GDPR, CCPA.
• Strong judgment and ability to make timely decisions in complex situations.
• Experience with Azure, AWS, and GCP (GovCloud a bonus).
• Experience managing/collaborating with MSSPs.
• Exceptional written and verbal communication across levels.

Responsibilities

• Serve as a subject matter expert for a team of analysts supporting 24/7/365 monitoring and response operations.
• Investigate and respond to cybersecurity incidents, including off-hours and on-call rotations.
• Act as escalation point for SOC operations and identify automation opportunities.
• Assess program strengths and weaknesses and recommend AI solutions to improve skills and knowledge.
• Stay current on emerging threats, AI developments, risks and vulnerabilities.
• Automate repetitive tasks within SOAR environments using Cloud, ML and AI.
• Develop detections aligned with MITRE ATT&CK and enhance with automation/AI.
• Validate alerts by interpreting confidence scores and risk ratings.
• Use NLP tools to analyze events alongside threat intelligence data.
• Collaborate with data science and engineering teams to improve AI models used in SOC.
• Refine playbooks, policies and guidelines in line with best practices and AI capabilities.
• Partner with security engineering, incident response and IT teams to improve monitoring.

Skills

SOC Monitoring

AI in Security

NLP for Logs

MCP Servers

AI Assistants

AI Threat Intelligence

MITRE ATT&CK Detections

Scripting (Python/Bash/PowerShell)

SOAR/SIEM/EDR Tools

Threats & Incident Response

Regulatory Frameworks (CMMC/NIST)

Cloud Platforms (Azure/AWS/GCP)

MSSP Collaboration

Communication Skills

Analytics & Problem-Solving

Time Management

Education

Bachelor's degree

6 years related experience

Tools

MCP servers

SOAR

SIEM

Threat Intelligence Platforms

EDR/XDR tools

Cloud security tooling

KQL

Job description

CDM Smith is seeking a Senior Cyber Operations Analyst to join our security operations team. You will monitor, detect, and respond to cybersecurity threats across diverse environments, using AI-enabled tooling, ML, and SIEM/SOAR capabilities to automate and improve detection and response.

You will mentor junior analysts and help evolve playbooks and metrics in a fast-paced, cross-functional setting.