Cyber Security Operations Analyst (Tier 2 SOC)

Job description

About Marvell Marvell’s semiconductor solutions are the essential building blocks of the data infrastructure that connects our world. Across enterprise, cloud and AI, and carrier architectures, our innovative technology is enabling new possibilities. At Marvell, you can affect the arc of individual lives, lift the trajectory of entire industries, and fuel the transformative potential of tomorrow. For those looking to make their mark on purposeful and enduring innovation, above and beyond fleeting trends, Marvell is a place to thrive, learn, and lead. Your Team, Your Impact Joining Marvell as a CyberSecurity Analyst, you will play a critical role in protecting Marvell's people, data, intellectual property, and infrastructure from evolving cyber threats. As part of the Security Operations Center (SOC), the central nervous system of Marvell's cybersecurity organization, you will be responsible not only for monitoring, detection, investigation, and response, but also for driving innovation through Artificial Intelligence (AI), Security Automation, and proactive Threat Hunting. This role requires a security professional who thinks beyond traditional SOC operations, continuously stays ahead of emerging threats and industry trends, and proactively identifies opportunities to leverage automation and AI technologies to improve detection, response, efficiency, and security outcomes. You will collaborate across global security teams, engineering teams, and business stakeholders to strengthen Marvell's cyber defenses while helping shape the future of SOC operations. What You Can Expect Security Operations & Incident Response Provide primary triage, investigation, analysis, and operational support for security alerts and events across the enterprise. Perform advanced correlation using SIEM, EDR, NDR, threat intelligence platforms, forensic tools, malware analysis tools, and data analytics platforms. Conduct real-time incident handling, including intrusion investigation, threat containment, remediation, and recovery activities. Analyze security incidents to determine root cause, attack path, scope of compromise, and business impact. Develop and maintain incident response procedures, playbooks, and detection methodologies. Effectively communicate security events, risks, and response activities to technical and executive stakeholders. Threat Hunting & Detection Engineering Conduct proactive threat hunting exercises using internal telemetry, threat intelligence, attacker TTPs, and hypothesis-driven hunting methodologies. Leverage MITRE ATT&CK and other threat frameworks to identify detection gaps and improve security visibility. Transform threat hunting findings into operationalized detections, use cases, analytics rules, and response playbooks. Identify emerging attacker techniques and develop corresponding monitoring and alerting strategies. Collaborate with threat intelligence teams to operationalize Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and adversary TTPs. Security Automation & SOC Optimization Identify opportunities to automate repetitive operational tasks and improve SOC efficiency through scripting, orchestration, and workflow automation. Design and implement SOAR playbooks and automated response workflows. Drive false-positive reduction initiatives through analytics tuning, machine learning insights, and detection optimization. Continuously improve detection coverage, incident response speed, and operational metrics through automation and innovation. AI Security & Innovation Research, evaluate, and recommend AI-driven security technologies and capabilities for SOC operations. Identify opportunities to leverage Generative AI, Machine Learning, and Security Copilots to improve threat detection, investigation, triage, threat hunting, and reporting. Develop ideas and use cases for AI integration across cybersecurity operations. Assess security risks associated with AI systems deployed within the enterprise. Monitor emerging AI-related threats, adversarial machine learning attacks and industry trends Contribute to the development of AI security monitoring use cases, detections, and response procedures. Use AI-assisted analytics responsibly to accelerate investigations while maintaining analytical rigor. Stay current on the evolving cybersecurity landscape, attacker methodologies, AI advancements, vulnerability trends, and emerging technologies. Actively contribute innovative ideas that enhance detection, automation, AI adoption, and overall SOC maturity. Participate in purple team exercises, tabletop simulations, attack emulations, and security validation activities. What We're Looking For 4+ years of experience as a SOC Analyst, Threat Hunter, Detection Engineer, or Incident Responder, preferably supporting a global enterprise with 5,000+ employees. Demonstrated experience in security operations, threat hunting, incident response, automation and detection engineering. Experience integrating automation into SOC workflows and operational processes. Experience evaluating or utilizing AI/ML technologies within cybersecurity workflows is highly desirable. Technical Expertise Deep understanding of MITRE ATT&CK framework with proven experience building detections, hunting methodologies, and response playbooks based on attacker TTPs. Strong knowledge of modern attack techniques, cyber kill chain methodologies, and advanced persistent threat (APT) operations. Experience conducting intelligence-driven and hypothesis-driven threat hunts. Ability to convert threat intelligence and hunting results into actionable detections Experience with one or more SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, Elastic, or Chronicle. Experience with SOAR platforms and security workflow automation. Proficiency with DLP technologies and data protection controls. Strong working knowledge of SOC tools and technologies. AI & Emerging Security Requirements Strong understanding of AI security concepts, risks, and attack methodologies. Deep Knowledge of AI based attacks and risks Ability to identify opportunities where AI can improve detection, investigation, response, reporting, and SOC productivity. Interest in evaluating and operationalizing AI solutions to enhance cybersecurity outcomes. Problem Solving & Innovation Demonstrated ability to think creatively and challenge conventional approaches to security operations. Strong analytical and investigative mindset with the ability to solve complex problems amid ambiguity. Passion for continuous learning, staying current with cybersecurity and AI trends, and bringing innovative ideas to the organization. Self-motivated with a track record of delivering end-to-end solutions in fast-paced, technology-driven environments. Communication Strong verbal and written communication skills. Ability to communicate effectively with executives, technical teams, and business stakeholders. Preferred Certifications GIAC Certifications (GCFA, GCIH, GCIA, GMON, GCTI, etc.) Certified Ethical Hacker (CEH) AI Security Certifications (where applicable) This role is eligible to participate in Marvell's bonus and equity plans, including a new hire equity grant and annual equity refreshers, ensuring you are rewarded for your contributions and remain invested in the company's long-term success. Additional Compensation and Benefit Elements With competitive compensation and great benefits, you will enjoy our workstyle within an environment of shared collaboration, transparency, and inclusivity. We’re dedicated to giving our people the tools and resources they need to succeed in doing work that matters, and to grow and develop with us. For additional information on what it’s like to work at Marvell, visit our Careers page. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status