Cybersecurity Operations Analyst

PIMCO

Key Responsibilities

• Incident Response & Threat Detection
• Respond to Cyber incidents with increasing independence, applying documented playbooks and escalation procedures.
• Investigate and triage security alerts, correlating data across multiple tools to determine scope and severity.
• Use AI-assisted investigation tools to accelerate triage, enrich context, and identify patterns across incidents.
• Escalate significant or ambiguous events to senior Engineers and Incident Responders with clear, well-documented findings.
• AI-Accelerated Learning & Response
• Leverage the team's AI models as a primary learning tool — using them to research unfamiliar threats, understand tooling, and build technical depth faster than traditional self-study.
• Apply AI tooling directly to response work: drafting investigation notes, summarizing log data, and accelerating root-cause analysis.
• Identify repetitive or manual tasks on the team and use AI tooling to automate or streamline them, actively working to reduce the operational load.
• Document and share effective AI-assisted workflows and prompts with teammates.
• Security Operations & Monitoring
• Perform continuous monitoring of security events, logs, and behavioral indicators across the environment.
• Support Phishing Email Response, including analysis, remediation, and user follow-up.
• Contribute to and maintain runbooks, knowledge-base articles, and standard operating procedures.
• Stakeholder Communication & Support
• Provide customer-facing support for Cyber-related questions and issues via email and messaging platforms.
• Promote good personal and professional cybersecurity hygiene through regular engagement with staff.
• Set and manage expectations with supervisory staff by establishing reasonable timelines and providing milestone updates.
• Workflow & Professional Development
• Manage and prioritize multiple concurrent workstreams in a fast-paced environment.
• Actively pursue relevant certifications and stay current on emerging cyber threats and industry trends.
• Participate in team knowledge-sharing sessions and post-incident reviews to build institutional knowledge.

Requirements & Tech Stack

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent practical experience).
• Excellent written and verbal communication skills, with the ability to explain technical issues to non-technical stakeholders.
• Strong organizational skills and self-sufficiency; able to operate with minimal supervision during active events.
• Working knowledge of core cybersecurity toolsets:
• Endpoint Detection & Response (EDR)
• Email Security Gateway
• SIEM
• Vulnerability Management
• Identity & Access Management
• Cloud Access Security Broker (CASB)
• Genuine enthusiasm for using AI tools (e.g., LLM-based assistants, AI-driven investigation platforms) as a core part of daily workflow — comfort experimenting with and adopting new AI tooling quickly.
• Ability to spot manual, repetitive work and a natural inclination to automate it rather than absorb it.
• Ability to remain composed and effective under pressure in a fast-paced, time-sensitive environment.
• Strong attention to detail with an analytical mindset and demonstrated problem-solving ability.
• Genuine interest in cybersecurity trends and a commitment to continuous learning.

Preferred / Desirable Certifications

• CompTIA: Security+, CySA+
• (ISC)²: SSCP, CCSP
• GIAC: GSEC, GISF, GCIH
• Cloud vendor security fundamentals (e.g., Microsoft SC-900, AWS Security Fundamentals)
• Prior hands-on experience with AI/LLM tools (e.g., Claude, ChatGPT, Copilot) for research, writing, or automation.