Senior Security Analyst

Cybersecurity Jobs; Overland Park (KS); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Competitive salary and benefits

Cutting-edge AI-driven security tech

OC/onsite collaboration

Career growth and development

Job summary

Cybersecurity Jobs seeks a Senior Security Analyst to join the SOC team focused on threat monitoring, incident response, and AI/ML-enhanced detection using Google SecOps and Chronicle.

The role involves monitoring alerts, triage, analysis, and automating workflows with AI, while collaborating with IT, Security, and Data Science teams to improve detection accuracy and response speed. On-site in Overland Park, KS.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent work experience.
• 4+ years in a SOC or security-focused role.
• Hands-on with analytics, log management, threat hunting, and incident response.
• Interest in automation, artificial intelligence, and machine learning to cybersecurity tasks.
• Strong understanding of cybersecurity concepts and frameworks (NIST, Mitre, ISO, Kill Chain).
• Experience with IDS, SIEM, and security automation platforms.
• Proficiency in scripting languages (Python, PowerShell).
• Knowledge of firewalls, endpoint protection, IDS/IPS, and threat intelligence platforms.
• Strong analytical and problem-solving skills; excellent communication.

Responsibilities

• Monitor security alerts and events across the enterprise network using traditional tools and AI/ML-powered detection systems.
• Perform triage, investigation, and event correlation to assess severity and potential impact.
• Use Google Chronicle for threat intelligence and log analysis to improve visibility and incident insights.
• Apply AI to detect patterns, anomalies, and behaviors indicating security incidents.
• Participate in on-call rotations and support team scheduling for incidents.
• Investigate and analyze security incidents using AI to automate initial analysis and strengthen threat hunting.
• Respond to incidents according to procedures including containment, eradication, and recovery.
• Conduct root cause analysis and forensic investigations to identify attack vectors and mitigations.
• Leverage Google SecOps and Chronicle to centralize security data and speed up response workflows.
• Use ML approaches to identify emerging threats and trends and provide actionable guidance.
• Work with Google SecOps tools to streamline operations and automate workflows.
• Collaborate with IT, Security, and Data Science teams to integrate Chronicle capabilities into the SOC.
• Optimize Chronicle for log management, threat hunting, and advanced analytics.
• Develop and maintain automated workflows for common security incidents using AI for intelligent decisions.
• Automate routine SOC tasks including log analysis, incident classification, and threat intelligence enrichment via Google SecOps and Chronicle integrations.
• Create detailed incident and threat intelligence reports integrating AI-driven findings.
• Prepare performance and security posture reporting for internal stakeholders, highlighting AI-driven improvements.
• Generate and present reports on threat trends and SOC operations for stakeholders and customers.
• Recommend security improvements and contribute to SOC playbooks.
• Share knowledge of AI-powered security techniques and Google SecOps tooling with SOC team members.

Skills

Security analytics

Log management

Threat hunting

Incident response

Automation

AI/ML in security

Education

Bachelor’s degree or equivalent

Tools

IDS

SIEM

SOAR

Python

PowerShell

Job description

Senior Security Analyst role on the Security Operations Center (SOC) team focused on threat monitoring, incident response, and AI/ML-enhanced detection using Google SecOps and Chronicle.

Responsibilities

• Monitor security alerts and events across the enterprise network using traditional tools and AI/ML-powered detection systems.
• Perform triage, investigation, and event correlation to assess severity and potential impact.
• Use Google Chronicle for threat intelligence and log analysis to improve visibility and incident insights.
• Apply AI to detect patterns, anomalies, and behaviors that may indicate security incidents, with a focus on reducing false positives and improving detection accuracy.
• Participate in on-call rotations and support team scheduling for critical incidents as needed.
• Investigate and analyze security incidents and breaches, using AI to automate initial analysis and strengthen threat hunting.
• Respond to incidents according to established procedures, including containment, eradication, and recovery.
• Conduct root cause analysis and forensic investigations to identify attack vectors and recommend mitigations.
• Leverage Google SecOps and Chronicle to centralize security data, correlate events, and speed up response workflows.
• Use machine learning approaches to identify emerging threats and trends and provide actionable guidance for response.
• Work with Google SecOps platform tools to streamline operations, improve threat visibility, and automate workflows.
• Collaborate with IT, Security, and Data Science teams to integrate Chronicle capabilities into the SOC.
• Optimize Chronicle for log management, threat hunting, and advanced analytics.
• Develop and maintain automated workflows for common security incidents using AI for intelligent decision-making and faster response.
• Automate routine SOC tasks including log analysis, incident classification, and threat intelligence enrichment via Google SecOps and Chronicle integrations.
• Create detailed incident and threat intelligence reports that integrate AI-driven findings.
• Prepare performance and security posture reporting for internal stakeholders, including highlights of AI-driven improvements and mitigation outcomes.
• Generate and present reports on threat trends and SOC operations for internal stakeholders and customers.
• Recommend security improvements and contribute to SOC playbook development.
• Share knowledge of AI-powered security techniques and Google SecOps tooling with SOC team members to improve detection and response capabilities.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent work experience.
• Relevant certifications are a plus (examples: CISSP, CISM, CEH).
• 4+ years of experience in a Security Operations Center (SOC) or similar security-focused role.
• Hands-on experience with security analytics, log management, threat hunting, and incident response.
• Interest in applying automation, artificial intelligence, and machine learning to cybersecurity tasks (threat detection, anomaly detection, security automation).
• Strong understanding of cybersecurity concepts and frameworks (examples: NIST, Mitre, ISO, Kill Chain).
• Experience with security tools such as IDS, SIEM, and security automation platforms.
• Proficiency in scripting languages for automation and integration (examples: Python, PowerShell).
• Knowledge of security technologies including firewalls, endpoint protection, IDS/IPS, and threat intelligence platforms.
• Strong analytical and problem-solving skills.
• Excellent communication skills for working with internal teams and external customers.
• Ability to work under pressure in a fast-paced, dynamic environment.

Preferred Skills

• Experience with SOAR (security orchestration, automation, and response) platforms.
• Exposure to cloud security platforms (examples: AWS, Azure, Google Cloud) and associated risks.
• Hands-on experience with Google SecOps and Chronicle for centralized threat intelligence and event correlation (preferred).
• Hands-on experience with Microsoft security platforms (examples: Sentinel, Defender) is a plus.

Technologies

• Google Chronicle, Google SecOps, AI, machine learning (ML)
• Python, PowerShell
• NIST, Mitre, ISO, Kill Chain
• SIEM, intrusion detection systems (IDS), IDS/IPS
• Firewalls, endpoint protection, threat intelligence platforms
• SOAR (security orchestration, automation, and response)
• AWS, Azure, Google Cloud
• Microsoft security platform (Sentinel, Defender)
• CISSP, CISM, CEH

Benefits

• Competitive salary and benefits package.
• Opportunity to work with cutting-edge AI-driven cybersecurity technologies and Google SecOps solutions.
• Collaboration with a team focused on continuously improving security operations.
• Growth and development culture with opportunities to expand knowledge in AI, cybersecurity, and emerging technologies.

Location: Overland Park, KS (onsite) | Experience: 4+ years