Lead L3 security investigations and incident response for cloud and on-prem infrastructure. Monitor SIEM/EDR/IDS, perform root-cause analysis, vulnerability assessments, and penetration tests. Implement cloud security controls (AWS/Azure/GCP), IAM, container security, SOAR automation, and compliance audits. Mentor junior analysts and provide regular security reporting.
We are seeking a highly skilled Senior Operations Analyst with expertise in Cybersecurity and Cloud/Infrastructure Security at an L3 support level. The ideal candidate will play a critical role in monitoring, analyzing, and securing the organization’s cloud and on-premises infrastructure, acting as the last line of escalation for complex security incidents and ensuring robust defenses against cyber threats.
RequirementsKey Responsibilities:
Cybersecurity Operations:
- Lead investigation and resolution of complex security incidents and breaches, coordinating with L1 and L2 teams as necessary.
- Monitor security tools and platforms (SIEM, EDR, IDS/IPS) to detect threats and mitigate vulnerabilities.
- Perform root-cause analysis for incidents, implementing preventative measures and documenting lessons learned.
- Conduct penetration tests and vulnerability assessments, ensuring remediation plans are implemented effectively.
- Develop and enforce security policies, procedures, and guidelines to protect sensitive data and systems.
- Design and implement robust security controls for cloud platforms (AWS, Azure, GCP) and hybrid environments.
- Manage identity and access management (IAM), ensuring least privilege principles are applied across the infrastructure.
- Conduct regular audits and assessments to validate compliance with security standards and regulations (e.g., GDPR, ISO 27001).
- Protect virtualized environments and containers using tools like Kubernetes security, Docker, or Azure Kubernetes Service (AKS).
- Monitor cloud environments for misconfigurations, unauthorized changes, or suspicious activity using tools like Prisma Cloud, Microsoft Defender for Cloud, or AWS Security Hub.
- Stay updated on the latest cybersecurity trends, threats, and vulnerabilities to ensure proactive protection measures.
- Collaborate with Threat Intelligence teams to analyze emerging risks and recommend appropriate countermeasures.
- Develop and execute incident response playbooks for cloud and infrastructure-specific scenarios.
- Implement automation solutions to improve detection, response, and remediation times using tools like SOAR platforms (e.g., Splunk Phantom, Palo Alto Cortex XSOAR).
- Optimize security tool performance and conduct regular health checks to ensure systems are running efficiently.
- Drive continuous improvement in operational processes by identifying inefficiencies and proposing enhancements.
- Partner with DevOps, CloudOps, and IT teams to ensure seamless integration of security measures into infrastructure workflows.
- Provide regular security reports and metrics to leadership, highlighting trends, risks, and mitigations.
- Mentor and train junior analysts in advanced security operations and best practices.
Technical Skills:
- Strong expertise in Cybersecurity domains: threat hunting, incident response, vulnerability management, and penetration testing.
- Advanced knowledge of cloud security tools and frameworks for AWS, Azure, and GCP.
- Proficiency with security tools: SIEM (Splunk, QRadar, Sentinel), EDR (CrowdStrike, Carbon Black), IDS/IPS (Snort, Suricata).
- Experience with encryption technologies, firewalls, VPNs, and Zero Trust architectures.
- Proficiency in scripting or programming (Python, Bash, PowerShell) for security automation.
- 5+ years in cybersecurity or IT security roles, with at least 2 years in cloud/infrastructure security.
- Proven experience in handling L3 escalations for complex security incidents.
- Familiarity with regulatory compliance standards (e.g., NIST, GDPR, PCI DSS, ISO 27001).
- Strong analytical and critical thinking skills to resolve complex security challenges.
- Excellent communication skills for cross-functional collaboration and incident reporting.
- Ability to work effectively under pressure and manage multiple priorities.
- Certifications: CISSP, AWS Certified Security - Specialty, Microsoft Certified: Security, Compliance, and Identity Fundamentals, or CCSP.
- Experience with DevSecOps practices and CI/CD pipeline security.
- Familiarity with security in containerized environments (Kubernetes, Docker).
Similar Jobs
Artificial Intelligence • Professional Services • Sales • Software
Design and deliver product and marketing assets for web and mobile: wireframes, user flows, high-fidelity mockups, prototypes, marketing visuals, landing pages, and A/B tests. Collaborate with founders, engineers, product, marketing, and sales to validate designs through usability testing and iterate quickly while owning end-to-end design strategy.
Top Skills:
CanvaFigma
Artificial Intelligence • Professional Services • Sales • Software
Build and own backend systems using PHP/Laravel: design RESTful APIs, manage databases and queries, improve performance, deploy features, debug production issues, collaborate with product and frontend teams, and maintain engineering standards.
Top Skills:
Ci/CdDatabasesDevOpsLaravelPHPRestful ApisSQLThird-Party Api Integration
Artificial Intelligence • Professional Services • Sales • Software
Lead the product roadmap for a B2B sales assistant: define strategy, guide engineers, conduct customer research, launch features, gather feedback, and iterate rapidly.
Top Skills:
GitGraphQLLinearOpenaiZapier
What you need to know about the Austin Tech Scene
Austin has a diverse and thriving tech ecosystem thanks to home-grown companies like Dell and major campuses for IBM, AMD and Apple. The state’s flagship university, the University of Texas at Austin, is known for its engineering school, and the city is known for its annual South by Southwest tech and media conference. Austin’s tech scene spans many verticals, but it’s particularly known for hardware, including semiconductors, as well as AI, biotechnology and cloud computing. And its food and music scene, low taxes and favorable climate has made the city a destination for tech workers from across the country.
Key Facts About Austin Tech
- Number of Tech Workers: 180,500; 13.7% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Dell, IBM, AMD, Apple, Alphabet
- Key Industries: Artificial intelligence, hardware, cloud computing, software, healthtech
- Funding Landscape: $4.5 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Live Oak Ventures, Austin Ventures, Hinge Capital, Gigafund, KdT Ventures, Next Coast Ventures, Silverton Partners
- Research Centers and Universities: University of Texas, Southwestern University, Texas State University, Center for Complex Quantum Systems, Oden Institute for Computational Engineering and Sciences, Texas Advanced Computing Center
