Cyber Security Operations Analyst (Tier 2 SOC)

Job description

About Marvell Marvell’s semiconductor solutions are the essential building blocks of the data infrastructure that connects our world. Across enterprise, cloud and AI, and carrier architectures, our innovative technology is enabling new possibilities.  At Marvell, you can affect the arc of individual lives, lift the trajectory of entire industries, and fuel the transformative potential of tomorrow. For those looking to make their mark on purposeful and enduring innovation, above and beyond fleeting trends, Marvell is a place to thrive, learn, and lead.  Your Team, Your Impact Joining Marvell as a CyberSecurity Analyst, you will play a critical role in protecting Marvell's people, data, intellectual property, and infrastructure from evolving cyber threats. As part of the Security Operations Center (SOC), the central nervous system of Marvell's cybersecurity organization, you will be responsible not only for monitoring, detection, investigation, and response, but also for driving innovation through Artificial Intelligence (AI), Security Automation, and proactive Threat Hunting. This role requires a security professional who thinks beyond traditional SOC operations, continuously stays ahead of emerging threats and industry trends, and proactively identifies opportunities to leverage automation and AI technologies to improve detection, response, efficiency, and security outcomes. You will collaborate across global security teams, engineering teams, and business stakeholders to strengthen Marvell's cyber defenses while helping shape the future of SOC operations. What You Can Expect Security Operations & Incident Response • Provide primary triage, investigation, analysis, and operational support for security alerts and events across the enterprise. • Perform advanced correlation using SIEM, EDR, NDR, threat intelligence platforms, forensic tools, malware analysis tools, and data analytics platforms. • Conduct real-time incident handling, including intrusion investigation, threat containment, remediation, and recovery activities. • Analyze security incidents to determine root cause, attack path, scope of compromise, and business impact. • Develop and maintain incident response procedures, playbooks, and detection methodologies. • Effectively communicate security events, risks, and response activities to technical and executive stakeholders. Threat Hunting & Detection Engineering • Conduct proactive threat hunting exercises using internal telemetry, threat intelligence, attacker TTPs, and hypothesis-driven hunting methodologies. • Leverage MITRE ATT&CK and other threat frameworks to identify detection gaps and improve security visibility. • Transform threat hunting findings into operationalized detections, use cases, analytics rules, and response playbooks. • Identify emerging attacker techniques and develop corresponding monitoring and alerting strategies. • Collaborate with threat intelligence teams to operationalize Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and adversary TTPs. Security Automation & SOC Optimization • Identify opportunities to automate repetitive operational tasks and improve SOC efficiency through scripting, orchestration, and workflow automation. • Design and implement SOAR playbooks and automated response workflows. • Drive false-positive reduction initiatives through analytics tuning, machine learning insights, and detection optimization. • Continuously improve detection coverage, incident response speed, and operational metrics through automation and innovation. AI Security & Innovation • Research, evaluate, and recommend AI-driven security technologies and capabilities for SOC operations. • Identify opportunities to leverage Generative AI, Machine Learning, and Security Copilots to improve threat detection, investigation, triage, threat hunting, and reporting. • Develop ideas and use cases for AI integration across cybersecurity operations. • Assess security risks associated with AI systems deployed within the enterprise. • Monitor emerging AI-related threats, adversarial machine learning attacks and industry trends • Contribute to the development of AI security monitoring use cases, detections, and response procedures. • Use AI-assisted analytics responsibly to accelerate investigations while maintaining analytical rigor. • Stay current on the evolving cybersecurity landscape, attacker methodologies, AI advancements, vulnerability trends, and emerging technologies. • Actively contribute innovative ideas that enhance detection, automation, AI adoption, and overall SOC maturity. • Participate in purple team exercises, tabletop simulations, attack emulations, and security validation activities. What We're Looking For • 4+ years of experience as a SOC Analyst, Threat Hunter, Detection Engineer, or Incident Responder, preferably supporting a global enterprise with 5,000+ employees. • Demonstrated experience in security operations, threat hunting, incident response, automation and detection engineering. • Experience integrating automation into SOC workflows and operational processes. • Experience evaluating or utilizing AI/ML technologies within cybersecurity workflows is highly desirable. Technical Expertise • Deep understanding of MITRE ATT&CK framework with proven experience building detections, hunting methodologies, and response playbooks based on attacker TTPs. • Strong knowledge of modern attack tech