Back to SearchChief Cyber Ops Analyst
Remote in Argentina, & 3 others
Security.Engineering& 16 others
Looking for something else?
Find a vacancy that works for you. Send us your CV to receive a personalized offer.
Find me a job
Choose an option
We are seeking a Chief Cyber Ops Analyst who will strengthen detection, hunting, and incident response across cloud, identity, endpoint, email, and network signals. You will own the hardest investigations, mentor analysts, and turn operational insight into durable engineering improvements.
Responsibilities
- Own complex, multi-signal investigations end-to-end from triage through root-cause analysis and closure
- Correlate activity across endpoint, identity, network, cloud, and email telemetry to determine scope and impact
- Make judgment calls on benign versus malicious activity and defend conclusions with evidence
- Perform threat hunts based on threat intelligence and TTPs and map techniques to your environment
- Write and refine advanced queries to hunt, pivot, and correlate events across data sources
- Build and maintain automation using scripts and integrations to enrich and correlate investigations
- Coordinate incident response actions for significant incidents and communicate status to stakeholders
- Balance business impact versus risk in containment decisions and escalate cross-team incidents appropriately
- Partner with detection engineering to translate investigation insights into higher-fidelity detections
- Author and tune detection content and measure detection effectiveness over time
- Develop reusable analytical patterns and automation such as SOAR playbooks
- Mentor analysts and codify knowledge into runbooks and hunt guides
- Use approved AI tools to accelerate investigations, hunts, and reporting with disciplined verification
Requirements
- 7+ years security operations experience owning complex, high-severity investigations
- Proven leadership skills mentoring mid-level and junior analysts and driving best practices
- Strong incident response experience coordinating containment and eradication across teams
- Advanced SIEM and EDR expertise using Microsoft Sentinel, Splunk, Elastic Security, Defender for Endpoint, CrowdStrike Falcon, or SentinelOne
- Deep query language skills with KQL, SQL, Elastic ES|QL/Lucene/EQL, or equivalent
- Strong scripting skills in Python or PowerShell for automation and API integrations
- Solid cloud security fundamentals across Amazon Web Services, Microsoft Azure, and Google Cloud Platform
- Strong threat hunting skills using threat intelligence and MITRE ATT&CK mapping
- Strong analytical skills to make evidence-based decisions under ambiguity
- Upper-Intermediate English proficiency (B2)
- B.S./M.S. degree in Computer Science, Cyber Security, or equivalent experience
Nice to have
- CrowdStrike Falcon Platform
- Security Orchestration and Automated Response
- Splunk
- Digital forensics
- Wireshark