Senior Cyber Ops Analyst — Remote AI-Driven Defense

CDM Smith; Charleston (SC); On-site; USD 110,000 - 150,000; Full time

Job summary

CDM Smith is seeking a Senior Cyber Operations Analyst in Charleston to monitor, detect and respond to cybersecurity threats in a fast‑paced environment. You will oversee investigations, triage incidents, and mentor junior analysts while advancing AI‑driven automation and detection capabilities across SOAR, SIEM, and cloud environments.

The role requires experience with MITRE ATT&CK, Python scripting, and collaboration with cross‑functional teams to continuously improve security posture and

Qualifications

• Experience in SOC monitoring and response or related experience.
• Experience using NLP, query construction and AI‑powered tools to analyze logs, threat intelligence and incident data.

Responsibilities

• Investigate and respond to cybersecurity incidents, including participating in off-hours and on-call rotations.
• Act as an escalation point for day-to-day SOC operations and identify opportunities to automate.
• Develop detection capabilities aligned with the MITRE ATT&CK framework and enhance them using automation/AI.
• Collaborate with data science and engineering teams to improve AI models used in SOC operations.
• Review reports from tabletop exercises, vulnerability assessments and penetration tests to drive improvements.

Skills

SOC monitoring

ML & AI in security

NLP for logs

Python scripting

Cloud platforms

MITRE ATT&CK

Team mentoring

Education

Bachelor's degree

Tools

SOAR

SIEM

MCP solutions

EDR/XDR tools

Job description

CDM Smith is seeking a Senior Cyber Operations Analyst in Charleston to monitor, detect and respond to cybersecurity threats in a fast‑paced environment. You will oversee investigations, triage incidents, and mentor junior analysts while advancing AI‑driven automation and detection capabilities across SOAR, SIEM, and cloud environments.

The role requires experience with MITRE ATT&CK, Python scripting, and collaboration with cross‑functional teams to continuously improve security posture and