Security Operations Center (SOC) Analyst

Brak informacji o wynagrodzeniu

SeniorZdalnieFull-time

#470673·Dodano 6 dni temu·6

Źródło: Arista Networks

Aplikuj teraz

Tech Stack / Keywords

CrowdStrikeEDRCQLSIEM LinuxMacWindowsVirusTotalOSINTPython

Podsumowanie oferty

Join the remote cybersecurity team to monitor, triage, and respond to cyber threats across primarily Mac and Linux environments, with some Windows systems. Build and refine detections using CrowdStrike, CQL, SIEM, and EDR capabilities.

Wymagania

4-5+ years in a SOC and/or as an active participant on incident response teams.
Hands-on experience with CrowdStrike or other EDR, triaging security incidents.
Proven ability to write CQL or similar queries and build detections for threat monitoring.
Experience triaging alerts in a high-volume environment.
Experience with threat intelligence feeds, platforms, and OSINT tools such as VirusTotal.
Familiarity with forensic analysis and evidence handling.
Exceptional critical-thinking and analytical skills to address complex security challenges.
Self-starter with a proven ability to take initiative and deliver results independently.
Driven mindset, thriving in fast-paced, high-pressure remote work environments.
Strong understanding of cybersecurity principles, threat landscapes, and attack vectors.
Proficiency in analyzing logs, network traffic, and endpoint data using CrowdStrike Next-Gen SIEM, particularly for Mac and Linux systems; Windows experience is a plus.
Solid knowledge of incident response processes and methodologies.
Familiarity with operating systems, with primary expertise in Mac and Linux, and secondary knowledge of Windows.
High attention to detail and ability to make sound decisions under pressure.
Demonstrated commitment to continuous learning and professional development in cybersecurity.

Nice to have:

Ability to write and optimize detections to detect and investigate security events.
Proficiency in scripting, such as Python, for automating SOC workflows.
Experience creating playbooks in CrowdStrike Fusion SOAR or similar SOAR.
Knowledge of cloud security (GCP, AWS, and/or Azure).
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience.

Obowiązki

Monitor and triage security alerts.
Build, test, and refine detections to enhance threat identification across Mac, Linux, and Windows systems.
Conduct in-depth analysis of security incidents, including malware, phishing, and advanced persistent threats, leveraging SIEM and EDR capabilities.
Perform proactive threat hunting using SIEM and EDR features.
Investigate and respond to incidents swiftly, following established incident response protocols.
Document findings clearly and provide actionable remediation recommendations.
Collaborate with cross-functional teams to strengthen security controls and mitigate vulnerabilities.
Stay current on emerging threats, vulnerabilities, and industry trends through self-directed learning.
Participate in an on-call rotation for 24x7x365 SOC coverage, demonstrating reliability and accountability.
Escalate confirmed or suspicious incidents and cases to the Incident Response team.

Inne informacje

Participate in an on-call rotation for 24x7x365 SOC coverage.

Arista Networks

14 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz