Senior Cyber Operations Analyst: AI-Driven Defense

CDM Smith; Macon (GA); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith is seeking a Senior Cyber Operations Analyst to monitor, detect, and respond to cybersecurity threats in a fast-paced setting. You will work with SOAR/SIEM, AI-enabled tools, and cross-functional teams to automate routine tasks and strengthen defensive capabilities.

You will mentor junior analysts and help advance MITRE ATT&CK-aligned detections, while coordinating with security engineers across cloud and on-prem environments.

Qualifications

• Experience in SOC monitoring and response.
• Working knowledge of ML and AI and their application in security operations.
• Experience using NLP, query construction and AI-powered tools to analyze logs and threat data.

Responsibilities

• Serve as a subject matter expert for a team of analysts supporting 24/7/365 monitoring and response operations.
• Investigate and respond to cybersecurity incidents, including off-hours and on-call rotations.
• Act as an escalation point for day-to-day SOC operations and identify opportunities to automate.
• Develop detection capabilities aligned with MITRE ATT&CK and enhance them with automation/AI.
• Collaborate with data science and engineering teams to improve AI models used in SOC operations.
• Refine playbooks, policies, procedures and guidelines in alignment with industry best practices.

Skills

SOC monitoring

ML & AI in security

NLP for logs

MCP servers

AI assistants for security

MITRE ATT&CK aligned detections

Python / Bash / PowerShell

SOAR / SIEM tools

Education

Bachelor's degree

Tools

SOAR platforms

SIEM

MCP agents

Azure / AWS / GCP

Job description

CDM Smith is seeking a Senior Cyber Operations Analyst to monitor, detect, and respond to cybersecurity threats in a fast-paced setting. You will work with SOAR/SIEM, AI-enabled tools, and cross-functional teams to automate routine tasks and strengthen defensive capabilities.

You will mentor junior analysts and help advance MITRE ATT&CK-aligned detections, while coordinating with security engineers across cloud and on-prem environments.