Operations Enhancement Analyst - Junior & Mid-Level [U.S. Citizenship & CBP High Trust Suitability Required]

About the role

Join Via Logic supporting U.S. Customs and Border Protection cybersecurity operations. As an Operations Enhancement Analyst, you'll help strengthen and mature Security Operations Center capabilities by identifying opportunities to improve processes, automation, security tooling, detection, and operational visibility. You'll work alongside cybersecurity and government teams to improve how security operations are performed—from automating workflows and refining playbooks to tuning security tools, developing security content, and measuring whether operational improvements are delivering results. This posting covers both Junior and Mid-Level Operations Enhancement Analyst openings. Both levels have a 3+ year hiring threshold for these openings. We'll consider the depth and relevance of your experience against the available positions to determine the appropriate level.

Responsibilities

• Support the continuous improvement and maturation of Security Operations Center processes, capabilities, and visibility.
• Help develop, improve, and maintain security operations processes, playbooks, work instructions, and operational workflows.
• Author and maintain automation scripts and workflows within Security Orchestration, Automation, and Response (SOAR) platforms.
• Troubleshoot and resolve issues involving SOAR code, integrations, workflows, and supporting infrastructure.
• Help define and track operational metrics, statistics, and key performance indicators (KPIs) to measure the effectiveness of automation and security-tool tuning.
• Identify gaps in detection capabilities and contribute strategies and recommendations for improving detection of attacker tactics, techniques, and behaviors.
• Support baselining of enterprise activity to help distinguish normal from abnormal behavior.
• Recommend improvements to event-monitoring policies, indicators, and alerts across technologies such as SIEM, firewalls, IDS, cloud services, email, DLP, and EDR.