{"id":109632,"url":"https://alion.io/job/ncr-information-security-operations-analyst","title":"Cyber Security AI Engineer, Security Operations Center","company":{"id":8743,"name":"NCR Voyix","domain":"ncr.com","url":"https://alion.io/company/ncr","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":35,"ghost_share":0,"stale_share":0.8,"repost_share":0,"time_to_fill_p50_days":37,"computed_at":"2026-10-17T05:46:00Z"}},"role":"AI/ML","role_family":"AI/ML","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Atlanta, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":83000,"max_usd":157000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":451},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Machine Learning","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"SQL","optional":false},{"name":"Copilot","optional":true}],"status":"live","first_seen_at":"2026-06-30T00:00:00Z","employer_posted_date":"2026-09-24","last_verified_at":"2026-10-16T16:37:59Z","board_verified":true,"closed_at":null,"days_open":109,"trust":{"level":"stale","repost_count":1,"flags":["stale"],"days_open":109},"description":"About NCR VOYIX\nNCR Voyix Corporation (NYSE: VYX) is a global platform-powered leader in unified commerce for shopping and dining. Combining a flexible, intelligent platform with end-to-end payments capabilities and services developed through its deep industry experience, NCR Voyix empowers retailers and restaurants to accelerate new possibilities for their operations, experiences and business outcomes. NCR Voyix is headquartered in Atlanta, Georgia, and serves customers in more than 35 countries worldwide.\nTitle: Cyber Security AI Engineer, Security Operations Center (SOC)\nLocation: Atlanta, GA\nOverview\nThe Cyber Security AI Engineer is a member of the Global Information Security team responsible for designing, developing, and operationalizing AI-driven cybersecurity capabilities that enhance Security Operations Center (SOC) effectiveness. This role combines expertise in cybersecurity, threat detection, automation, data science, machine learning, and security engineering to improve the organization's ability to identify, investigate, and respond to cyber threats at scale.\nThe Cyber Security AI Engineer will partner closely with Threat Intelligence, Incident Response, Security Engineering, Detection Engineering, and IT Operations teams to develop intelligent detection models, automate security workflows, improve investigations through AI-assisted analytics, and create scalable solutions that reduce analyst workload while increasing detection accuracy.\nThis role supports the organization's mission to protect the confidentiality, integrity, and availability of information assets through innovative use of artificial intelligence, machine learning, automation, and advanced analytics.\nKey Responsibilities\nAI-Driven Security Operations\nDesign, develop, and maintain AI and machine learning solutions to improve threat detection, incident triage, and security investigations.\nBuild predictive models to identify malicious activity, anomalous user behavior, insider threats, and emerging attack patterns.\nDevelop and operationalize AI-assisted threat hunting capabilities across enterprise environments.\nIntegrate Large Language Models (LLMs), Generative AI, and advanced analytics into SOC workflows to accelerate investigations and response activities.\nCreate AI-powered copilots to assist analysts with investigation, enrichment, summarization, and incident response recommendations.\nIncident Response Support\nSupport investigation and response efforts for cybersecurity incidents.\nLeverage AI analytics to accelerate root cause analysis and incident containment.\nAssist incident responders with automated evidence gathering and forensic data analysis.\nParticipate in major incident investigations and contribute to post-incident reviews.\nSecurity Detection Engineering\nDevelop and optimize detection logic using SIEM, XDR, EDR, cloud security, and log analytics platforms.\nBuild automated detection pipelines leveraging threat intelligence, MITRE ATT&CK mappings, and behavioral analytics.\nCreate AI-generated detection rules and continuously validate detection effectiveness.\nDevelop methods to reduce false positives and improve alert prioritization using machine learning techniques.\nThreat Intelligence & Threat Hunting\nUtilize internal and external threat intelligence sources to train and improve detection models.\nConduct proactive threat hunting exercises utilizing AI-enhanced analytics and behavioral indicators.\nDevelop automated intelligence ingestion, correlation, and enrichment processes.\nTranslate intelligence findings into actionable detection and response capabilities.\nSecurity Automation & Orchestration\nDesign and implement security automation using SOAR platforms, APIs, scripting, and AI workflows.\nAutomate repetitive SOC tasks including alert enrichment, triage, investigation, reporting, and containment recommendations.\nDevelop integrations between AI tools, SIEM platforms, threat intelligence systems, and case management tools.\nImprove SOC operational efficiency through continuous process optimization and automation.\nRequired Qualifications\nTechnical Skills\n0-4 years of experience in Cybersecurity, Security Operations, IT Support, Systems Administration, Network Administration, Incident Response, or a related technical field.\nBachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related discipline, or equivalent practical experience.\nBasic understanding of cybersecurity principles, security monitoring, and incident response processes.\nExposure to SIEM technologies such as Microsoft Sentinel, Splunk, QRadar, Elastic, or similar platforms through professional experience, internships, labs, or academic projects.\nExposure to endpoint security technologies such as Microsoft Defender, CrowdStrike, SentinelOne, or similar solutions.\nBasic scripting or programming skills in Python, PowerShell, SQL, or comparable languages.\nFamiliarity with APIs, automation concepts, or workflow development.\nInterest in leveraging automation, analytics, artificial intelligence, and machine learning to improve cybersecurity operations.\nStrong analytical, troubleshooting, and problem-solving skills.\nExcellent communication skills and ability to work collaboratively across teams.\nCybersecurity Knowledge\nWorking knowledge or exposure to:\nSecurity Operations Center (SOC) concepts\nIncident Response fundamentals\nThreat Detection and Monitoring\nThreat Intelligence concepts\nMITRE ATT&CK Framework\nNIST Cybersecurity Framework\nCloud security fundamentals (Azure, AWS, or GCP)\nIdentity and Access Management (IAM)\nVulnerability Management\nCommon cybersecurity threats, attack techniques, and defensive controls\nPreferred Qualifications\nUp to 3 years of experience supporting cybersecurity operations, security engineering, or security monitoring functions.\nExperience through work, internships, home labs, military service, certifications, or academic projects involving cybersecurity tools and technologies.\nExposure to Microsoft security technologies, including Microsoft Sentinel, Defender, Security Copilot, or Azure security services.\nFamiliarity with SOAR platforms and security automation concepts.\nExposure to AI, machine learning, large language models, or generative AI technologies through projects, coursework, or professional experience.\nExperience developing scripts, automations, dashboards, or reporting solutions.\nKnowledge of cloud platforms such as Azure, AWS, or Google Cloud.\nDemonstrated curiosity and willingness to learn emerging security and AI technologies.\nPreferred Certifications\nCompTIA Security+\nMicrosoft SC-900: Security, Compliance, and Identity Fundamentals\nMicrosoft AZ-900: Azure Fundamentals\nMicrosoft AI-900: AI Fundamentals\nMicrosoft SC-200: Security Operations Analyst Associate\nSplunk Core Certified User\nISC2 Certified in Cybersecurity (CC)\nOffers of employment are conditional upon passage of screening criteria applicable to the job\nEEO Statement\nIntegrated into our shared values is NCR Voyix’s commitment to equal employment opportunity. All qualified applicants will receive consideration for employment without regard to sex, age, race, color, creed, religion, national origin, disability, sexual orientation, gender identity, veteran status, military service, genetic information, or any other characteristic or conduct protected by law. NCR Voyix is committed to being a globally inclusive company where all people are treated fairly, recognized for their individuality, promoted based on performance and encouraged to strive to reach their full potential. We believe in understanding and respecting differences among all people. Every individual at NCR Voyix has an ongoing responsibility to respect and support a globally diverse environment.\nStatement to Third Party Agencies\nTo ALL recruitment agencies: NCR Voyix only accepts resumes from agencies on the preferred supplier list. Please do not forward resumes to our applicant tracking system, NCR Voyix employees, or any NCR Voyix facility. NCR Voyix is not responsible for any fees or charges associated with unsolicited resumes\n“When applying for a job, please make sure to only open emails that you will receive during your application process that come from a @ncrvoyix.com email domain.”","description_format":"text","description_chars":8274,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Security Operations","Information Security","POS Terminals & Kiosks"],"lifecycle":[{"event":"open","at":"2026-06-30T00:00:00Z"},{"event":"close","at":"2026-08-28T07:39:41Z"},{"event":"reopen","at":"2026-09-21T21:12:16Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.308,"p_room":0.28,"age_days":109,"expected_fill_days":37,"reasons":["conf:13","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/ncr-information-security-operations-analyst","json_url":"https://alion.io/job/ncr-information-security-operations-analyst.json","meta":{"generated_at":"2026-10-17T19:36:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2949,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8743},"rest":"https://alion.io/mcp/rest/get_company?id=8743"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fncr-information-security-operations-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fncr-information-security-operations-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fncr-information-security-operations-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ncr-information-security-operations-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fncr-information-security-operations-analyst"}]}