Cyber Security Operations Analyst

Your role:

As a Cyber Security Operations Analyst, you will play a key role in protecting Global Relay by monitoring the technology environment, investigating security events and supporting the timely detection and response to cyber threats. You will operate enterprise security technologies and execute established operational processes to help maintain the confidentiality, integrity and availability of the organization's systems and data.

You will work closely with Engineering, Infrastructure, Product, Security Architecture & Technology and other technology teams to investigate security events, support incident response activities and contribute to the prioritization of technical vulnerabilities based on exploitability, exposure and threat intelligence.

Working within the Security Operations & Threat Management team, you will contribute to the continuous improvement of operational processes, monitoring capabilities and cyber resilience while helping ensure Global Relay can effectively detect, respond to and recover from cyber threats.

Your Responsibilities:

• Monitor and analyze security events to identify malicious activity and support timely detection and response.
• Investigate alerts using endpoint, network and cloud telemetry, validating events and escalating where appropriate.
• Perform initial incident triage, classification and prioritization using established playbooks.
• Execute approved containment actions and support eradication and recovery activities.
• Maintain accurate investigation records, evidence and operational documentation.
• Operationalize threat intelligence by correlating indicators of compromise with security events.
• Support risk-based vulnerability prioritization by validating findings and identifying exploitable exposure.
• Collaborate with Infrastructure, Engineering and Application Security to support incident resolution.
• Evaluate monitoring effectiveness and recommend improvements to Security Architecture & Technology.
• Contribute to operational metrics, lessons learned and continual service improvement.
• Participate in cyber security table top exercises and maintain operational readiness.
• Support a collaborative, customer-focused and high-performing security culture.

About You:

• 1-2+ years in Cyber Security, Information Technology or a related discipline, with experience supporting security monitoring, incident response or IT operations within enterprise environments.
• Demonstrated experience monitoring and investigating security events across endpoint, network, cloud or application environments using enterprise security technologies.
• Foundational understanding of cyber threat detection, incident response processes and security operations best practices.
• Experience working with technologies such as SIEM, EDR/XDR, IDS/IPS, email security, cloud security, vulnerability management and identity services.
• Understanding of networking, operating systems, authentication, logging and common attack techniques used by modern threat actors.
• Familiarity with threat intelligence concepts, the MITRE ATT&CK framework and risk-based vulnerability management principles.
• Working knowledge of industry frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, CIS Controls and SOC 2.
• Information Security certifications are desirable and may include Security+, CySA+, GSEC, SSCP or equivalent industry-recognized credentials.
• Excellent verbal, written and documentation skills with the ability to communicate technical findings clearly and professionally.
• Strong analytical and problem-solving skills with a methodical approach to investigating security events.
• Demonstrated ability to prioritize work, adapt to changing priorities and perform effectively within a fast-paced operational environment.
• Collaborative team player with a strong commitment to continuous learning and operational excellence.