Senior Cyber Operations Analyst — Remote & AI-Driven

CDM Smith; Savannah (GA); Remote; USD 102,000 - 179,000; Full time

Job summary

CDM Smith is seeking a Senior Cyber Operations Analyst to monitor, detect and respond to cybersecurity threats in a fast-paced environment. You will analyze, triage and resolve investigations using a mix of SOAR, SIEM and AI-enabled tools.

You will mentor junior staff, automate routine tasks and contribute to a more resilient security posture across multi-technology environments. Strong communication and cross-functional collaboration are essential.

Qualifications

• Experience in SOC monitoring and response.
• Working knowledge of ML and AI in security operations.
• Experience using NLP, query construction and AI-powered tools to analyze logs and incident data.
• Experience with MCP servers and agents to support investigations.
• Hands-on experience with AI assistants and platforms for investigation and response.
• Ability to develop detections aligned with MITRE ATT&CK.

Responsibilities

• Serve as a subject matter expert for 24/7/365 monitoring and response operations.
• Investigate and respond to cybersecurity incidents, including off-hours/on-call rotations.
• Escalation point for SOC operations and automation opportunities.
• Advise on AI solutions to improve team skills and knowledge.
• Stay current on evolving cyber threats and AI developments.
• Automate tasks within SOAR environments using Cloud tech, ML and AI.

Skills

SOC monitoring

AI in security

NLP

MCP servers

Python

PowerShell

KQL

MITRE ATT&CK

Azure/AWS/GCP

team mentoring

automation

Education

Bachelor's degree

Tools

SOAR platforms

SIEM platforms

MCP servers

Python

PowerShell

KQL

Job description

CDM Smith is seeking a Senior Cyber Operations Analyst to monitor, detect and respond to cybersecurity threats in a fast-paced environment. You will analyze, triage and resolve investigations using a mix of SOAR, SIEM and AI-enabled tools.

You will mentor junior staff, automate routine tasks and contribute to a more resilient security posture across multi-technology environments. Strong communication and cross-functional collaboration are essential.