What You’ll Do:

Cyber Security Operations Analyst is responsible for safeguarding information system assets by identifying and solving potential and actual security problems to ensure the confidentiality, integrity, and availability of IT resources and their associated data.

Location: Hybrid, working onsite at our San Jose office 3 days per week with the flexibility to work remotely the remainder of your time

Job ID: 42012

• Analyze and track the cyber threat landscape, including identifying and investigating cyber threats actors and their activities to enhance cyber security posture.
• Perform security monitoring, security event triage, and incident response using SIEM and CASB solutions. Analyze alert patterns to provide recommendations for policy improvement.
• Create content (queries, dashboards, reports, etc.) in security tools like Splunk SIEM, Netskope CASB, DLP & others.
• Respond to daily security incidents following established incident response methodology.
• Identify, monitor, and present data points which includes daily dashboards, metrics, and reporting.
• Ensure continuous improvement of security operations processes and procedures.
• Create and maintain technical documentation for existing security tools and solutions.
• Conduct incident response activities as appropriate including triage, root cause analysis, kill chain analysis, escalations, notifications, and communication with the relevant parties.
• Perform threat hunting across the network for proactive detection of anomalous events and possible intrusions/attacks.
• Work on Cyber Security projects providing technical support and guidance to IT and other teams.
• Identify gaps in IT infrastructure by providing insight into advanced threat attackers TTPs
• Enhance department and organization reputation by delivering quality results and exploring opportunities to increase value and raise awareness of Cyber Security Program.
• Balance concurrent projects with ongoing operational responsibilities.
• Stay informed on recent security trends and vulnerabilities, and proactively apply this knowledge to reduce risk.

What You’ll Bring:

• Bachelor’s degree in Computer Science, Information Systems, Cyber Security or relevant field with 1-2+ years of work experience in Security Operations, Threat Intelligence, or Incident Response.
• Hands-on experience with Splunk Enterprise Security & Netskope CASB solution is required.
• Extensive knowledge in two or more of the following Security tools:  SIEM, CASB, Advanced DLP, SOAR, EDR, Email Gateway, Enterprise Immune System.
• Understanding of TCP/IP networking, and network services such as DNS, SMTP, DHCP, etc.
• Hands on experience with networking commands or any scripting language in existing role.
• You’re inclusive, adapting your style to the situation and diverse global norms of our people.
• An avid learner, you approach challenges with curiosity and resilience, seeking data to help build understanding.
• You’re collaborative, building relationships, humbly offering support and openly welcoming approaches.
• Relevant security certifications or vendor certifications in the above security tools is preferred.