USAF - Security Operations Analyst

Role overview

Qualifications

• Bachelor of Science in computer science, information technology, or a related field.
• Experience monitoring security events, investigating alerts, and supporting enterprise incident response.
• Knowledge of network protocols, endpoints, access controls, cyberattack techniques, and security tools.
• Ability to correlate telemetry, analyze vulnerabilities, hunt threats, and document findings.
• Understanding of incident response, evidence handling, and approved escalation procedures.
• Strong analytical judgment, collaboration, and writing skills.

Security monitoring and incident response

• Monitor and triage alerts, logs, and events; analyze network, endpoint, application, and cloud telemetry.
• Conduct intelligence-driven threat hunting in IT and OT environments and investigate anomalous behavior.
• Respond to suspected incidents, escalate confirmed cases, and perform authorized containment, eradication, and recovery.
• Maintain incident timelines, notes, evidence, and supporting records.

Vulnerabilities, coordination, and SOC support

• Coordinate response and recovery with infrastructure, network, application, cloud, and cybersecurity teams.
• Analyze vulnerability findings, support prioritization and remediation tracking, and coordinate validation with assessment specialists.
• Support SOC tools and sensors, identify telemetry gaps, and recommend detection and mitigation improvements.
• Coordinate with cyber service providers and command authorities; track cyber orders and taskers.
• Contribute procedures, lessons learned, compliance evidence, and research on emerging threats and technologies.