Sr. Cybersecurity Operations Analyst

Join Atlas Air Worldwide. Move the World with Us!

At Atlas Air Worldwide, we're not just an airline, we're a global engine powering cargo, passenger, and leasing operations across more than 70 countries. As a leader in outsourced aviation logistics, we're built on a foundation of safety
, service excellence
, integrity
, innovation
, teamwork
, and responsibility
. With over 30 years of history, a modern all‑Boeing fleet, and nearly 5,000 teammates collaborating across operations, technical, and corporate functions, we're driven by purpose.

We are looking for a Cybersecurity Operations Specialist to manage security event monitoring, vulnerability assessments, web application penetration tests, and integrity checks. You will design and implement advanced detection solutions using SIEM and SOAR, respond to incidents, and lead threat and vulnerability management.

• Security event monitoring and incident response: design, implement, and leverage advanced detections using SIEM and SOAR; develop custom detection rules, automated remediation, playbooks, and alerts; evaluate detection coverage using MITRE frameworks; tune and retire detection capabilities to optimize alert‑to‑incident ratio; maintain operational playbooks and workbooks to improve detection and response.
• Participate directly in the security incident response process and contribute to containment and eradication of threats and recovery from cybersecurity incidents.
• Monitor multiple sources of incident reporting (mailboxes, hotlines, external sources) and optimize response times through automated routines.
• Propose and define new SIEM content and monitoring use cases for emerging applications, threats, and policies.
• Monitor and resolve security alerts from the SIEM and other security systems, and those escalated by the MSV providing SOC services, for potential threats and compliance issues.
• Improve detection systems for performance, scalability, and cost‑effectiveness.

• Conduct threat modeling to proactively identify and address security risks before exploitation.
• Perform security evaluations on hybrid cloud environments and recommend prioritized actions.
• Perform attack simulation testing to validate use‑case efficacy and purple‑team exercises.
• Monitor industry security advisories, prioritize emerging threats, and recommend mitigations.
• Coordinate with System Operations on vulnerability patching cycles to reduce mean time to remediate significant vulnerabilities.
• Guide the organization on security best practices and promote a security‑minded culture.

• 5+ years’ experience in Security Operations or related IT operational roles.
• Hands‑on experience with security monitoring and incident response (Microsoft Defender and Sentinel); vulnerability management tools (Tenable, Burp Suite, CSPM, Managed Engine); endpoint, network, and identity security controls (Defender, Cisco, Citrix, Palo Alto);
  Microsoft Windows Administration (AD/Azure AD, Entra , Exchange, SharePoint); cloud security operations (AWS, GCP, Azure, O365);
  Windows and Linux operating systems.
• Demonstrable experience analyzing security events, identifying suspicious activity, and responding to incidents in a hybrid environment.
• Working knowledge of common attack techniques targeting multinational organizations and aviation; familiarity with MITRE ATT&CK.
• Experience developing detection logic and threat‑hunting queries using Microsoft KQL or similar query languages.
• Deep understanding of DISA STIG, Cloud Security Requirements Guide, CIS Benchmarks, and ability to advise tailoring to specific business needs.
• Familiarity with NIST 800‑53 Revision 5 and Capability Maturity Model; ability to work effectively in a regulated government environment.
• CISSP or GIAC (GSEC, GCIA, GCFA, GCIH, GCWN) or similar certification strongly desired.
• Ability to work overtime during critical peaks, be available for last‑minute requests.
• Ability to work independently and as part of a team in a dynamic environment.
• Will obtain Microsoft Security Operations Analyst Certification SC‑200 within one year of hire.
• Will acquire and maintain Top Secret or Secret clearance…