Cyber Security Operations Analyst (Tier 2 SOC)

Identify opportunities to automate repetitive operational tasks and improve SOC efficiency through scripting, orchestration, and workflow automation.

Design and implement SOAR playbooks and automated response workflows.

Drive false-positive reduction initiatives through analytics tuning, machine learning insights, and detection optimization.

Continuously improve detection coverage, incident response speed, and operational metrics through automation and innovation.

Research, evaluate, and recommend AI-driven security technologies and capabilities for SOC operations.

Identify opportunities to leverage Generative AI, Machine Learning, and Security Copilots to improve threat detection, investigation, triage, threat hunting, and reporting.

Develop ideas and use cases for AI integration across cybersecurity operations.

Assess security risks associated with AI systems deployed within the enterprise.

Monitor emerging AI-related threats, adversarial machine learning attacks and industry trends

Contribute to the development of AI security monitoring use cases, detections, and response procedures.

Use AI-assisted analytics responsibly to accelerate investigations while maintaining analytical rigor.

Stay current on the evolving cybersecurity landscape, attacker methodologies, AI advancements, vulnerability trends, and emerging technologies.

Actively contribute innovative ideas that enhance detection, automation, AI adoption, and overall SOC maturity.

Participate in purple team exercises, tabletop simulations, attack emulations, and security validation activities.

4+ years of experience as a SOC Analyst, Threat Hunter, Detection Engineer, or Incident Responder, preferably supporting a global enterprise with 5,000+ employees.

Demonstrated experience in security operations, threat hunting, incident response, automation and detection engineering.

Experience integrating automation into SOC workflows and operational processes.

Experience evaluating or utilizing AI/ML technologies within cybersecurity workflows is highly desirable.

Deep understanding of MITRE ATT&CK framework with proven experience building detections, hunting methodologies, and response playbooks based on attacker TTPs.

Strong knowledge of modern attack techniques, cyber kill chain methodologies, and advanced persistent threat (APT) operations.

Experience conducting intelligence-driven and hypothesis-driven threat hunts.

Ability to convert threat intelligence and hunting results into actionable detections

Experience with one or more SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, Elastic, or Chronicle.

Experience with SOAR platforms and security workflow automation.

Proficiency with DLP technologies and data protection controls.

Strong working knowledge of SOC tools and technologies.

Demonstrated ability to think creatively and challenge conventional approaches to security operations.

Strong analytical and investigative mindset with the ability to solve complex problems amid ambiguity.

Passion for continuous learning, staying current with cybersecurity and AI trends, and bringing innovative ideas to the organization.

Self-motivated with a track record of delivering end-to-end solutions in fast-paced, technology-driven environments.

Strong verbal and written communication skills.

Ability to communicate effectively with executives, technical teams, and business stakeholders.

GIAC Certifications (GCFA, GCIH, GCIA, GMON, GCTI, etc.)

Certified Ethical Hacker (CEH)

AI Security Certifications (where applicable)

To support fair and authentic hiring practices, candidates are not permitted to use AI tools (such as transcription apps, real-time answer generators like ChatGPT or Copilot, or automated note-taking bots) during interviews.

These tools must not be used to record, assist with, or enhance responses in any way. Our interviews are designed to evaluate your individual experience, thought process, and communication skills in real time. Use of AI tools without prior instruction from the interviewer will result in disqualification from the hiring process.

This position may require access to technology and/or software subject to U.S. export control laws and regulations, including the Export Administration Regulations (EAR). As such, applicants must be eligible to access export-controlled information as defined under applicable law. Marvell may be required to obtain export licensing approval from the U.S. Department of Commerce and/or the U.S. Department of State. Except for U.S. citizens, lawful permanent residents, or protected individuals as defined by 8 U.S.C. 1324b(a)(3), all applicants may be subject to an export license review process prior to employment.