Consultant, CCO - Security Analytics & Automation

Job Purpose and Impact
The Consultant, Core Cyber Operations - Security Analytics & Automation job enhances our security operations by leveraging advanced analytics, Security Orchestration, Automation, and Response (SOAR) capabilities, and automation tools. The ideal candidate will have a background in cybersecurity, automation, or data analytics, and will help develop and implement solutions that improve our threat detection and response capabilities. With limited supervision, this job supports the following functions:
Key Accountabilities• SECURITY ANALYTICS: Utilize advanced data analytics techniques to identify and mitigate security threats. Develop and maintain security metrics and dashboards to provide insights into security posture and incident trends.• SOAR IMPLEMENTATION: Design, implement, and manage SOAR solutions to automate incident response processes. Integrate SOAR platforms with existing security tools and workflows to enhance efficiency and effectiveness.• SOC ALARM OVERSIGHT: Develop, test, and maintain Security Operations Center (SOC) alarms to ensure accurate and timely detection of security incidents. Regularly review and update alarm configurations to adapt to evolving threats and improve detection capabilities. Collaborate with SOC analysts to validate alarm effectiveness and minimize false positives.• AUTOMATION: Develop and deploy automation scripts and tools to streamline security operations. Collaborate with cross-functional operations teams to identify opportunities for automation and improve overall security posture.
Qualifications
ESSENTIAL FUNCTIONS
CYBER SERVICES VISIBILITY: Designs and operates to assure situational visibility for all cyber services, including foundational cyber analytics and automation.
MINIMUM & TYPICAL YEARS OF WORK EXPERIENCE• Minimum requirement of 2 years of relevant work experience. Typically reflects 3 years or more of relevant experience.• Understanding of cybersecurity principles, threat detection, and incident response.• Experience in security analytics, SOAR, and/or automation.• Proficiency in scripting languages such as Python, PowerShell, or Bash.