Cyber Security Operations Analyst (Tier 2 SOC)
About Marvell
Marvell’s semiconductor solutions are the essential building blocks of the data infrastructure that connects our world. Across enterprise, cloud and AI, and carrier architectures, our innovative technology is enabling new possibilities.
At Marvell, you can affect the arc of individual lives, lift the trajectory of entire industries, and fuel the transformative potential of tomorrow. For those looking to make their mark on purposeful and enduring innovation, above and beyond fleeting trends, Marvell is a place to thrive, learn, and lead.
Your Team, Your Impact
Joining Marvell as a CyberSecurity Analyst, you will play a critical role in protecting Marvell's people, data, intellectual property, and infrastructure from evolving cyber threats. As part of the Security Operations Center (SOC), the central nervous system of Marvell's cybersecurity organization, you will be responsible not only for monitoring, detection, investigation, and response, but also for driving innovation through Artificial Intelligence (AI), Security Automation, and proactive Threat Hunting.This role requires a security professional who thinks beyond traditional SOC operations, continuously stays ahead of emerging threats and industry trends, and proactively identifies opportunities to leverage automation and AI technologies to improve detection, response, efficiency, and security outcomes. You will collaborate across global security teams, engineering teams, and business stakeholders to strengthen Marvell's cyber defenses while helping shape the future of SOC operations.
What You Can Expect
Security Operations & Incident Response
- Provide primary triage, investigation, analysis, and operational support for security alerts and events across the enterprise.
- Perform advanced correlation using SIEM, EDR, NDR, threat intelligence platforms, forensic tools, malware analysis tools, and data analytics platforms.
- Conduct real-time incident handling, including intrusion investigation, threat containment, remediation, and recovery activities.
- Analyze security incidents to determine root cause, attack path, scope of compromise, and business impact.
- Develop and maintain incident response procedures, playbooks, and detection methodologies.
- Effectively communicate security events, risks, and response activities to technical and executive stakeholders.
Threat Hunting & Detection Engineering
- Conduct proactive threat hunting exercises using internal telemetry, threat intelligence, attacker TTPs, and hypothesis-driven hunting methodologies.
- Leverage MITRE ATT&CK and other threat frameworks to identify detection gaps and improve security visibility.
- Transform threat hunting findings into operationalized detections, use cases, analytics rules, and response playbooks.
- Identify emerging attacker techniques and develop corresponding monitoring and alerting strategies.
- Collaborate with threat intelligence teams to operationalize Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and adversary TTPs.
Security Automation & SOC Optimization
- Identify opportunities to automate repetitive operational tasks and improve SOC efficiency through scripting, orchestration, and workflow automation.
- Design and implement SOAR playbooks and automated response workflows.
- Drive false-positive reduction initiatives through analytics tuning, machine learning insights, and detection optimization.
- Continuously improve detection coverage, incident response speed, and operational metrics through automation and innovation.
AI Security & Innovation
- Research, evaluate, and recommend AI-driven security technologies and capabilities for SOC operations.
- Identify opportunities to leverage Generative AI, Machine Learning, and Security Copilots to improve threat detection, investigation, triage, threat hunting, and reporting.
- Develop ideas and use cases for AI integration across cybersecurity operations.
- Assess security risks associated with AI systems deployed within the enterprise.
- Monitor emerging AI-related threats, adversarial machine learning attacks and industry trends
- Contribute to the development of AI security monitoring use cases, detections, and response procedures.
- Use AI-assisted analytics responsibly to accelerate investigations while maintaining analytical rigor.
- Stay current on the evolving cybersecurity landscape, attacker methodologies, AI advancements, vulnerability trends, and emerging technologies.
- Actively contribute innovative ideas that enhance detection, automation, AI adoption, and overall SOC maturity.
- Participate in purple team exercises, tabletop simulations, attack emulations, and security validation activities.
What We're Looking For
- 4+ years of experience as a SOC Analyst, Threat Hunter, Detection Engineer, or Incident Responder, preferably supporting a global enterprise with 5,000+ employees.
- Demonstrated experience in security operations, threat hunting, incident response, automation and detection engineering.
- Experience integrating automation into SOC workflows and operational processes.
- Experience evaluating or utilizing AI/ML technologies within cybersecurity workflows is highly desirable.
Technical Expertise
- Deep understanding of MITRE ATT&CK framework with proven experience building detections, hunting methodologies, and response playbooks based on attacker TTPs.
- Strong knowledge of modern attack techniques, cyber kill chain methodologies, and advanced persistent threat (APT) operations.
- Experience conducting intelligence-driven and hypothesis-driven threat hunts.
- Ability to convert threat intelligence and hunting results into actionable detections
- Experience with one or more SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, Elastic, or Chronicle.
- Experience with SOAR platforms and security workflow automation.
- Proficiency with DLP technologies and data protection controls.
- Strong working knowledge of SOC tools and technologies.
AI & Emerging Security Requirements
- Strong understanding of AI security concepts, risks, and attack methodologies.
- Deep Knowledge of AI based attacks and risks
- Ability to identify opportunities where AI can improve detection, investigation, response, reporting, and SOC productivity.
- Interest in evaluating and operationalizing AI solutions to enhance cybersecurity outcomes.
Problem Solving & Innovation
- Demonstrated ability to think creatively and challenge conventional approaches to security operations.
- Strong analytical and investigative mindset with the ability to solve complex problems amid ambiguity.
- Passion for continuous learning, staying current with cybersecurity and AI trends, and bringing innovative ideas to the organization.
- Self-motivated with a track record of delivering end-to-end solutions in fast-paced, technology-driven environments.
Communication
- Strong verbal and written communication skills.
- Ability to communicate effectively with executives, technical teams, and business stakeholders.
Preferred Certifications
- GIAC Certifications (GCFA, GCIH, GCIA, GMON, GCTI, etc.)
- Certified Ethical Hacker (CEH)
- AI Security Certifications (where applicable)
Additional Compensation and Benefit Elements
With competitive compensation and great benefits, you will enjoy our workstyle within an environment of shared collaboration, transparency, and inclusivity. We’re dedicated to giving our people the tools and resources they need to succeed in doing work that matters, and to grow and develop with us. For additional information on what it’s like to work at Marvell, visit our Careers page.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.
Interview Integrity
To support fair and authentic hiring practices, candidates are not permitted to use AI tools (such as transcription apps, real-time answer generators like ChatGPT or Copilot, or automated note-taking bots) during interviews.
These tools must not be used to record, assist with, or enhance responses in any way. Our interviews are designed to evaluate your individual experience, thought process, and communication skills in real time. Use of AI tools without prior instruction from the interviewer will result in disqualification from the hiring process.
This position may require access to technology and/or software subject to U.S. export control laws and regulations, including the Export Administration Regulations (EAR). As such, applicants must be eligible to access export-controlled information as defined under applicable law. Marvell may be required to obtain export licensing approval from the U.S. Department of Commerce and/or the U.S. Department of State. Except for U.S. citizens, lawful permanent residents, or protected individuals as defined by 8 U.S.C. 1324b(a)(3), all applicants may be subject to an export license review process prior to employment.
#LI-RV1