AI Security Operations Analyst

Job Posting End Date
07-19-2026

Please note the job posting will close on the day before the posting end date.

Job Summary Responsible for large-scale security assignments providing direction to other team members. Responsible for gathering, investigating, and analyzing very complex security requirements, processes, and incidents. Leads analysis of security controls assessments (internal and third party) through application security testing, penetration testing or other means to ensure controls effectiveness. Leads the identification and documentation of potential mitigations /remediations and ensures report creation of findings with identified risk response.

Responsible for the conceptual design of implementation strategies on assigned security projects/activities. Leads advanced level implementation, support, and/or usage of technical solutions. Leads others in advanced problem solving, decision-making, and functional area knowledge. Mentors and provides functional/technical work direction to team.

Job Description Responsible for integrating, optimizing, and operationalizing artificial intelligence (AI) capabilities within the security operations center. This role bridges cybersecurity operations and advanced analytics, leveraging AI-driven tools to enhance threat detection, automate response workflows, and improve overall security posture. The analyst will work closely with SOC analysts, detection engineering, and data teams to ensure AI solutions are effectively deployed, tuned and aligned with real-world security use cases.

What You'll Do:

Essential Job Functions & Tasks Design and enhance fusion center capabilities by integrating cross-domain intelligence, improving visibility, and enabling enterprise-wide situational awareness and decision making.

Develop and deploy AI models to support alert triage, prioritization and anomaly detection.

Design, implement and maintain AI driven detection and response capabilities within the SOC.Analyze large scale security telemetry to identify patterns, threats and opportunities for detection improvement.

Collaborate with SOC analysts and engineers to identify and implement AI-assisted decision making.

Integrate AI-driven enrichment and correlation into existing security tooling.

Automate repetitive SOC tasks using AI and scripting.

Create dashboard and metrics to measure SOC performance improvements.

Support development of AI assisted investigation workflows and SOC copilots.

Apply a creative, analytical mindset to SOC operations, intelligence, and physical/cyber security data, developing new approaches to identify trends, risks, and actionable insights.

Monitor model performance, reduce false positives/negatives, and continuously improve detection quality.

Partner with data engineers to ensure proper data ingestion, normalization, and feature engineering.

Document AI use cases, workflows and operational playbooks.

Stay current on emerging threats, adversary tactics and advancements in AI for cybersecurity.

Nice-to-have Advanced experience with machine learning, data science or AI applications in security.

Ability to analyze threat patterns and assess enterprise impact.

Hands on experience with SIEM platforms.

Experience with scripting or programming.

Familiarity with MITRE ATT&CK, MITRE ATLAS and common adversary tactics and techniques.

Exposure to SOAR platforms and security automation workflows.

Experience working with large datasets, log analysis, or telemetry pipelines.

Strong interpersonal, investigative, and critical thinking skills.

Adaptable to changing priorities and high-pressure environments.

Active or eligible for SECRET DoD clearance.

Certifications:

SANS GCIA, GCIH, GAIPS, GASAE, GOAACAISPGoogle Professional Machine Learning Engineer AWS Certified Machine Learning IBM Certified AI Engineer

What We're Looking For:

Security Spec Sr (SG7)
Education requirements are listed below:

Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 3 years relevant experience in IT system administration/help desk/security (cyber or physical); OR graduation from an approved Cybersecurity Program; alternatively may have non-degree qualifications (such as hands-on demonstrated ability in a technical interview/assessment).Work Experience requirement listed below:2 or more years of Information Technology related experience;

OR 1 or more years of security related experience, which may include military/government work experience in addition to any experience identified above.

Security Spec Prin (SG8)
Education requirements are listed below:

Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical); OR graduation from an approved Cybersecurity Program; alternatively may have non-degree qualifications…