Senior Cyber Operations Analyst - Remote AI-Driven Defense

CDM Smith; Mobile (AL); Remote; USD 102,000 - 179,000; Full time

Job summary

CDM Smith is seeking a Senior Cyber Operations Analyst to monitor, detect, and respond to cybersecurity threats in a fast-paced environment. You will work across SOARs, SIEMs, endpoints, cloud, and network devices, applying MITRE ATT&CK aligned detections and automation to improve resilience.

You will mentor junior analysts, participate in on-call rotations, and help shape detection capabilities with AI-driven tooling while maintaining clear communication with cybersecurity leaders and

Qualifications

• Experience in SOC monitoring and response.
• Working knowledge of ML and AI in security operations.
• Experience using NLP and AI-powered tools to analyze logs and threat data.
• Experience with MCP servers and agents for investigations.
• Hands-on with AI assistants and platforms for security analysis and response.
• Understanding of emerging cybersecurity threats including AI usage.
• Ability to develop detections aligned with MITRE ATT&CK.
• Proficient in scripting (Python, Bash, JS, PowerShell) and KQL.
• Experience with SOAR, SIEM, threat intel platforms, identity systems, and EDR/XDR tools.
• Strong analytical and communication skills.

Responsibilities

• Serve as SME for 24/7/365 monitoring and response operations.
• Investigate and respond to cybersecurity incidents, including on-call rotations.
• Act as escalation point for SOC operations and identify automation opportunities.
• Assess program strengths and recommend AI solutions to improve skills.
• Stay current on threats, AI developments and vulnerabilities.
• Automate tasks within SOAR environments using Cloud, ML and AI.
• Develop detections aligned with MITRE ATT&CK and enhance via automation/AI.
• Validate alerts by interpreting confidence scores and risk ratings.
• Use NLP tools to analyze events with threat intel data.
• Collaborate with data science and engineering teams to improve AI models.
• Refine playbooks, policies and guidelines with industry best practices.
• Support monitoring improvements with security engineering/IT teams.
• Track metrics and KPIs for security events.
• Participate in tabletop exercises to identify gaps.

Skills

SOC monitoring

ML & AI in security

NLP & threat intel analysis

Scripting (Python/Bash/PowerShell/JS)

MITRE ATT&CK

Cloud platforms (Azure/AWS/GCP)

Communication

Mentoring juniors

Decision making

MSSP coordination

Education

Bachelor's degree

6 years related experience

Tools

SOAR

SIEM

MCP servers

KQL

EDR/XDR tools

Job description

CDM Smith is seeking a Senior Cyber Operations Analyst to monitor, detect, and respond to cybersecurity threats in a fast-paced environment. You will work across SOARs, SIEMs, endpoints, cloud, and network devices, applying MITRE ATT&CK aligned detections and automation to improve resilience.

You will mentor junior analysts, participate in on-call rotations, and help shape detection capabilities with AI-driven tooling while maintaining clear communication with cybersecurity leaders and