Security Analyst, Observability and Operations

Cybersecurity Jobs; Atlanta (GA); On-site; USD 123,000 - 176,000; Full time

Job summary

Cybersecurity Jobs is seeking a Security Analyst, Observability and Operations, to oversee secure operating environments across automated and agentic workflows in the gTech ecosystem. You will monitor security outcomes end to end, conduct threat hunting, and lead incident triage through coordinated handoffs while providing operational intelligence to the engineering roadmap.

The role is onsite in Atlanta, GA with compensation ranging from USD 123,000 to 176,000 per year.

Qualifications

• Bachelor’s degree or equivalent practical experience in CS, IS, or cybersecurity.
• 5 years of experience in security operations, incident response, threat hunting, IT compliance or equivalent.
• Experience with log analysis, data querying (SQL), or monitoring security controls.

Responsibilities

• Monitor agentic and automated workflows; triage edge cases and manage operational fallbacks.
• Run day-to-day threat hunting and perform advanced log analysis using SQL and a BI platform.
• Triage data transfer and access alerts; monitor access and map permissions.
• Verify efficacy of automated provisioning tools by validating access outcomes and control behavior.
• Serve as triage lead for the gTech ecosystem; monitor incident queues and orchestrate handoffs with D&R teams.
• Validate false positives, triage legacy issues, and track remediation velocity against SLAs.

Skills

Log analysis

Threat hunting

Incident response

Security operations

Education

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or equivalent

Tools

SQL

Business Intelligence Platform

Job description

Security Analyst, Observability and Operations supports secure, reliable operation across agentic and automated workflows in the gTech ecosystem. You will monitor security outcomes end to end, run day-to-day threat hunting, and lead incident triage through to coordinated handoffs, while feeding operational intelligence back into the engineering roadmap.

Work model: Onsite in Atlanta, GA. Compensation: USD 123,000 to 176,000 per year.

How you’ll contribute: this role acts as an observability and feedback engine, helping ensure autonomous remediations and agentic workflows operate securely and effectively. You’ll also manage operational fallback tiers when automated workflows require human escalation.

Responsibilities

• Monitor agentic and automated flows, triage edge cases, and manage operational fallbacks when workflows require human escalation.
• Run day-to-day threat hunting and perform advanced log analysis using SQL and a Business Intelligence Platform.
• Triage data transfer and access alerts, including access alert monitoring and audit permission mapping.
• Verify the efficacy of automated provisioning tools by validating access outcomes and control behavior.
• Serve as triage lead for the gTech ecosystem by monitoring incident queues, conducting initial forensic analysis, and orchestrating handoffs with central Detection and Response (D&R) teams.
• Validate false positives, triage legacy issues, and track remediation velocity to align with global service level objective timelines.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or equivalent practical experience.
• 5 years of experience in security operations (SOC), incident response, threat hunting, IT compliance, or equivalent.
• Experience with log analysis, data querying (SQL), or monitoring security controls.

Preferred Qualifications

• Experience coordinating cross-functional security incidents.
• Familiarity with Google data analysis infrastructure (for example, business intelligence platforms).
• Understanding of common security frameworks, access governance models, and the vulnerability management life-cycle.
• Ability to translate operational security findings into technical engineering requirements.

Technologies: SQL, Business Intelligence Platform.