Senior Cybersecurity Ops Analyst

Jobtailor; Santa Ana (CA); On-site; USD 75,000 - 120,000; Full time

Job summary

Jobtailor in Santa Ana, CA, seeks an experienced SOC Analyst to monitor security events and mentor junior analysts. You will identify and respond to incidents, support vulnerability management, and contribute to risk assessment and security controls aligned with IT strategy.

You will also help develop cyber metrics and threat intelligence while implementing automation to improve SOC efficiency and resilience. This role requires hands-on experience with SIEM, IDS/IPS, and security tooling.

Qualifications

• Bachelor’s degree in a related field; 2 years of related experience required.
• Additional experience can be substituted for education.
• Preferred certifications: CySA+, SecurityX+, GIAC Security Essentials (GSEC) or similar.
• LiveScan background check, CSS Department review, and Probation Department review required.
• Drug screen required.
• Programming knowledge: Python, C++, JavaScript.
• SIEM technologies knowledge.
• IDS/IPS, firewalls, anti-virus/anti-malware knowledge.
• Incident response experience and vulnerability management experience.
• Experience analyzing alerts via Sentinel SIEM or similar tools.
• Experience owning security incidents and full incident response cycle.
• Adherence to SOC Standard Operating Procedures.

Responsibilities

• Proactively monitor security events for networks and systems.
• Mentor and guide T1 SOC Analysts.
• Identify, investigate, and report on potential Security Incidents.
• Support risk and vulnerability assessment at the network, system, and application level.
• Support cyber metrics development and reporting.
• Support cyber threat intelligence development and reporting.
• Develop and implement automation tasks.
• Develop, recommend, and implement security controls and operational risk mitigations.
• Assist in security awareness programs.
• Research, evaluate, and recommend new security tools and technologies.
• Introduce security tools to the enterprise aligning with IT security strategy.
• Scan, identify, contain, mitigate, and remediate vulnerabilities and intrusions.

Skills

Security Event Monitoring

Incident Response

Mentoring

Python

C++

JavaScript

SIEM

NIST Compliance

Threat Intelligence

Automation

Education

Bachelor’s degree in a related field

Tools

Sentinel SIEM

IDS/IPS

Firewalls

Anti-Virus/Anti-malware

COTS/GOTS Tools

Job description

• Proactively monitor security events for networks and systems
• Mentor and guide T1 SOC Analysts
• Identify, investigate, and report on potential Security Incidents
• Support risk and vulnerability assessment at the network, system, and application level
• Support cyber metrics development, maintenance, and reporting
• Support cyber threat intelligence development and reporting
• Support routine identification, development and implementation of automation tasks
• Develop, recommend, and implement security controls and formulate operational risk mitigations
• Assist in security awareness programs
• Research, evaluate, and recommend new security tools, techniques, and technologies
• Introduce security tools and technologies to the enterprise in alignment with IT security strategy
• Use COTS/GOTS and custom tools and processes to scan, identify, contain, mitigate, and remediate vulnerabilities and intrusions
• Assist in implementing required government policy, including NIST, and recommend process tailoring
• Analyze and validate established security requirements and recommend additional requirements and safeguards
• Review system audits and monitor corrective actions until closure
• Provide briefings to senior staff

Requirements

• Bachelor’s degree in a related field and 2 years of related experience required
• Additional experience can be substituted in lieu of education
• Preferred certifications: CySA+, SecurityX+, GIAC Security Essentials (GSEC), or similar industry-related certifications
• Must pass the LiveScan background check, CSS Department review, and Probation Department review
• Must pass a drug screen
• Knowledge of programming languages such as Python, C++, and JavaScript
• Knowledge of Security Information and Event Management (SIEM) technologies
• Knowledge of IDS/IPS, firewalls, and anti-virus/anti-malware technologies
• Incident response experience
• Vulnerability management experience
• Experience analyzing security alerts via Sentinel SIEM; other SIEM tools acceptable
• Experience responding to and partially or fully owning security incidents
• Knowledge of the full incident response cycle: Identification, Protection, Detection, Response, Recovery
• Adherence to Standard Operating Procedures for the SOC

Core Competencies

Demonstrates expertise in security event monitoring, incident response, and vulnerability management while effectively mentoring junior analysts. Proficient in implementing security controls and developing cyber threat intelligence aligned with organizational strategies.

Highest-signal resume keywords

• Incident Response Experience
• Vulnerability Management Experience
• Knowledge of SIEM Technologies
• Knowledge of Programming Languages (Python, C++, JavaScript)
• Preferred Certifications (CySA+, SecurityX+, GSEC)

ATS Optimization Keywords

Hard Skills

• Security Event Monitoring
• Incident Investigation
• Risk Assessment
• Security Control Implementation
• Automation Task Development
• Vulnerability Scanning
• Security Requirements Analysis
• Security Awareness Programs
• Cyber Metrics Development
• Incident Response Cycle Knowledge

Soft Skills

• Mentoring
• Communication
• Problem-Solving

Certifications & Qualifications

• CySA+
• SecurityX+
• GIAC Security Essentials (GSEC)

Industry Keywords

• NIST Compliance
• SOC Standard Operating Procedures
• Cyber Threat Intelligence
• Security Incident Reporting
• Operational Risk Mitigation

Tools & Technologies

• SIEM Tools (Sentinel)
• IDS/IPS
• Firewalls
• Anti-Virus Technologies
• COTS/GOTS Tools