Senior Cyber Operations Analyst - Remote AI-Driven SOC Lead

CDM Smith; Raleigh (NC); Remote; USD 120,000 - 150,000; Full time

Job summary

CDM Smith is seeking a Senior Cyber Operations Analyst to monitor, detect, and respond to cybersecurity threats in a fast-paced environment. You will analyze, triage, and resolve investigations, using AI-powered tools to automate tasks and improve response.

The role requires cross-functional collaboration across technologies, including cloud, endpoints, networks and threat intel. You will mentor junior analysts, develop detections aligned with MITRE ATT&CK, and contribute to a resilient security

Qualifications

• Bachelor's degree required; equivalent experience may be considered.
• 6+ years of related experience or equivalent.
• Strong knowledge of AI, ML, and security operations.
• Experience with SIEM, SOAR, and threat intel platforms.

Responsibilities

• Serve as a subject matter expert for a team of analysts supporting managed 24/7/365 monitoring and response operations.
• Investigate and respond to cybersecurity incidents, including off-hours on-call rotations.
• Act as an escalation point for day-to-day SOC operations and identify automation opportunities.
• Assess program strengths and weaknesses and recommend AI solutions to improve team skills and knowledge.
• Stay current on emerging cybersecurity threats, AI developments, risks and vulnerabilities.

Skills

SOC monitoring & response

ML & AI in security

NLP & threat data analysis

MCP servers & agents

AI assistants platforms

MITRE ATT&CK framework

Python Bash JS PowerShell KQL

Cloud (Azure AWS GCP)

MSSP collaboration

Clear communication skills

Education

Bachelor's degree

Tools

MCP servers

SOAR

SIEM

Threat intelligence platforms

EDR/XDR tools

KQL

Job description

CDM Smith is seeking a Senior Cyber Operations Analyst to monitor, detect, and respond to cybersecurity threats in a fast-paced environment. You will analyze, triage, and resolve investigations, using AI-powered tools to automate tasks and improve response.

The role requires cross-functional collaboration across technologies, including cloud, endpoints, networks and threat intel. You will mentor junior analysts, develop detections aligned with MITRE ATT&CK, and contribute to a resilient security