Cybersecurity Operations Analyst

PIMCO is hiring an entry-level Cybersecurity Operations Analyst to support its Cyber Incident Response Team and Security Operations Center in Austin. The role focuses on security monitoring, alert triage, incident response, phishing response, and using AI tools to accelerate investigations and improve operational workflows.

What you'll do:

• Respond to Cyber incidents with increasing independence, applying documented playbooks and escalation procedures
• Investigate and triage security alerts, correlating data across multiple tools to determine scope and severity
• Use AI-assisted investigation tools to accelerate triage, enrich context, and identify patterns across incidents
• Escalate significant or ambiguous events to senior Engineers and Incident Responders with clear, well-documented findings
• Leverage the team's AI models as a primary learning tool — using them to research unfamiliar threats, understand tooling, and build technical depth faster than traditional self-study alone
• Apply AI tooling directly to response work: drafting investigation notes, summarizing log data, and accelerating root-cause analysis
• Identify repetitive or manual tasks on the team and use AI tooling to automate or streamline them, actively working to reduce the operational load carried by the Operations team
• Document and share effective AI-assisted workflows and prompts with teammates to raise the bar for the whole team
• Perform continuous monitoring of security events, logs, and behavioral indicators across the environment
• Support Phishing Email Response, including analysis, remediation, and user follow-up
• Contribute to and maintain runbooks, knowledge-base articles, and standard operating procedures
• Provide customer-facing support for Cyber-related questions and issues via email and messaging platforms

What they're looking for:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent practical experience)
• Excellent written and verbal communication skills, with the ability to explain technical issues to non-technical stakeholders
• Strong organizational skills and self-sufficiency; able to operate with minimal supervision during active events
• Working knowledge of core cybersecurity toolsets: Endpoint Detection & Response (EDR), Email Security Gateway, SIEM, Vulnerability Management, Identity & Access Management, and Cloud Access Security Broker (CASB)
• Genuine enthusiasm for using AI tools (e.g., LLM-based assistants, AI-driven investigation platforms) as a core part of daily workflow — comfort experimenting with and adopting new AI tooling quickly
• Ability to spot manual, repetitive work and a natural inclination to automate it rather than absorb it as routine toil
• Ability to remain composed and effective under pressure in a fast-paced, time-sensitive environment
• Strong attention to detail with an analytical mindset and demonstrated problem-solving ability
• Genuine interest in cybersecurity trends and a commitment to continuous learning
• CompTIA: Security+, CySA+
• (ISC)²: SSCP, CCSP
• GIAC: GSEC, GISF, GCIH

Benefits:

• A discretionary bonus based on company, business, team, and individual performance.
• Education reimbursements.
• Ongoing training in technology, communication, and diversity & inclusion.
• Career mobility and opportunities to learn different functions and technologies.
• Access to AI models purpose-built for cyber work.
• Opportunities to volunteer and participate in technology pro bono programs.