Cyber Security Operations Analyst (Tier 2 SOC)

About Marvell Marvell’s semiconductor solutions are the essential building blocks of the data infrastructure that connects our world. Across enterprise, cloud and AI, and carrier architectures, our innovative technology is enabling new possibilities. At Marvell, you can affect the arc of individual lives, lift the trajectory of entire industries, and fuel the transformative potential of tomorrow. For those looking to make their mark on purposeful and enduring innovation, above and beyond fleeting trends, Marvell is a place to thrive, learn, and lead.

Your Team, Your Impact Joining Marvell as a CyberSecurity Analyst, you will play a critical role in protecting Marvell's people, data, intellectual property, and infrastructure from evolving cyber threats. As part of the Security Operations Center (SOC), the central nervous system of Marvell's cybersecurity organization, you will be responsible not only for monitoring, detection, investigation, and response, but also for driving innovation through Artificial Intelligence (AI), Security Automation, and proactive Threat Hunting.

This role requires a security professional who thinks beyond traditional SOC operations, continuously stays ahead of emerging threats and industry trends, and proactively identifies opportunities to leverage automation and AI technologies to improve detection, response, efficiency, and security outcomes. You will collaborate across global security teams, engineering teams, and business stakeholders to strengthen Marvell's cyber defenses while helping shape the future of SOC operations.

What You Can Expect Security Operations & Incident Response Provide primary triage, investigation, analysis, and operational support for security alerts and events across the enterprise. Perform advanced correlation using SIEM, EDR, NDR, threat intelligence platforms, forensic tools, malware analysis tools, and data analytics platforms. Conduct real-time incident handling, including intrusion investigation, threat containment, remediation, and recovery activities.

Analyze security incidents to determine root cause, attack path, scope of compromise, and business impact. Develop and maintain incident response procedures, playbooks, and detection methodologies. Effectively communicate security events, risks, and response activities to technical and executive stakeholders. Threat Hunting & Detection Engineering Conduct proactive threat hunting exercises using internal telemetry, threat intelligence, attacker TTPs, and hypothesis-driven hunting methodologies.

Leverage MITRE ATT&CK and other threat frameworks to identify detection gaps and improve security visibility. Transform threat hunting findings into operationalized detections, use cases, analytics rules, and response playbooks. Identify emerging attacker techniques and develop corresponding monitoring and alerting strategies. Collaborate with threat intelligence teams to operationalize Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and adversary TTPs.

Security Automation & SOC Optimization Identify opportunities to automate repetitive operational tasks and improve SOC efficiency through scripting, orchestration, and workflow automation. Design and implement SOAR playbooks and automated response workflows. Drive false-positive reduction initiatives through analytics tuning, machine learning insights, and detection optimization. Continuously improve detection coverage, incident response speed, and operational metrics through automation and innovation.

AI Security & Innovation Research, evaluate, and recommend AI-driven security technologies and capabilities for SOC operations. Identify opportunities to leverage Generative AI, Machine Learning, and Security Copilots to improve threat detection, investigation, triage, threat hunting, and reporting. Develop ideas and use cases for AI integration across cybersecurity operations. Assess security risks associated with AI systems deployed within t