Lead Cybersecurity Operations Analyst (REMOTE)

At DICK’S Sporting Goods, we believe in how positively sports can change lives. On our team, everyone plays a critical role in creating confidence and excitement by personally equipping all athletes to achieve their dreams.  We are committed to creating an inclusive and diverse workforce, reflecting the communities we serve.

If you are ready to make a difference as part of the world’s greatest sports team, apply to join our team today!

OVERVIEW:

The Lead Cybersecurity Operations Analyst will serve as a hands-on leader and subject matter expert for cybersecurity operations. They will guide complex security monitoring activities, lead incident investigations, and use multi-source data to identify risks and recommend improvements that strengthen the enterprise’s security posture. This role drives meaningful operational enhancements, mentors analysts, and helps shape the future of our detection and response capabilities. 

RESPONSIBILITIES 

• Lead security incident investigations and ensure timely containment, root cause analysis, and cross-team collaboration. Provide expert guidance on SIEM strategy, detection logic, and associated security technologies (EDR, email/web gateways, cloud controls). Standardize and refine monitoring workflows to improve signal quality, reduce false positives, and expand visibility across the environment. 

• Leverage data from diverse sources (logs, telemetry, threat intel, case history) to identify patterns, emerging issues, and potential business impacts. Develop, drive, and execute recommendations—technical or professional—that shape both short-term defensive actions and longer-term operational strategy. 

• Boost SOC effectiveness by implementing new tools, automation, AI-powered processes, and optimized playbooks supported by clear performance metrics. Anticipate what’s next by actively monitoring emerging threats and regulatory changes that affect the company. 

• Mentor and elevate teammates by sharing expertise, modeling strong communication under pressure, and supporting a culture of learning within the SOC. Collaborate closely with Technology teams, Legal/Privacy, Risk & Compliance, vendors, and third-party service providers. 

• Act as a subject matter expert for technology, policy, and regulatory topics in your area. Maintain relevant professional certifications and stay current through conferences and ongoing professional development. Advise peers and leadership on emerging risks, best practices, and operational implications. 

PREFERRED SKILLS & EXPERIENCE 

• Security & Incident Event Management (SIEM) 

• Endpoint Detection & Response (EDR) 

• Secure email gateways 

• Query-building 

• Detection Engineering 

• Threat Hunting 

• Experience with MITRE ATT&CK mapping and detection engineering workflows. 

• Cloud and identity investigation experience (e.g. identity compromise and bypass techniques). 

• Exposure to SOAR automation, playbook development, or case management platforms. 

• Data pipeline and storage expertise (e.g. event and log data parsing) 

• Securi