Senior Security Analyst

Senior Security Analyst

Who we are

What you’ll do 

• Represent security in internal and external meetings to discuss security analysis, findings and security/compliance responses. 
• Review past incidents and identify attack trends. Finetune and reconfigure alerts based on prior incidents to improve detection.
• Actively participate in the development, documentation, and implementation of new processes to expand and mature capabilities for the organization.
• Identify and track internal and external assets to identify potential risks. Communicate these risks to internal and external stakeholders and build a plan of action.
• Develop, update, and maintain a repository of cybersecurity threat information that may be used in conducting risk assessments and reports on cyber risk trends.
• Build and maintain tools for automation of security events and reporting. Optimize and reconfigure tools to improve security processes.
• Implement, maintain and monitor IDS/IPS rule sets, alerts and reports.
• Perform investigations and improve detection processes on a wide variety of security events from various sources to determine whether they pose a threat to Pindrop
• Identify, research and develop internal and open source tools used to improve security and threat intelligence workflows to support Pindrop's unique environment
• Collaborate with internal and external teams to answer customer questionnaires, compliance audits.

Who you are

• You are, hands-on problem solver that excels in dynamic fast paced environments, curious and always looking to learn., highly interested in how things work and gets excited by threat modeling and new exploits
• You are resilient in the face of challenges, change, and ambiguity
• You are optimistic and believe that you can make a problem into a solution
• You are resourceful, excited to uncover innovative solutions and teach yourself something new when needed
• You take accountability, do the things you say you’ll do, under-promise and over-deliver
• You are nimble and adaptable when priorities change and continue to see the “forest through the trees” 

Your skill-set:

• 2+ years of security monitoring and incident response experience
• Must have experience with Linux, Mac, and knowledge of Windows
• Experience in configuration and maintenance of endpoint security solutions, eg. Crowdstrike, SentinelOne, Carbon Black.
• Experience with security tools including SIEM, Metasploit, Splunk, Wireshark
• In-depth knowledge of SIEM log ingestion and alert creation.
• Hands-on experience with TCP/IP and networking
• Ability to write scripts/code using Python or other scripting languages for automation
• Knowledge of incident response and investigation tools and techniques
• Experience with security operations in cloud platforms such as AWS, GCP, Azure etc.
• Experience responding to security questionnaires and customer questions

• Experience with forensic analysis tools (commercial and open-source) and procedures desired
• Experience with threat feeds and threat intelligence (e.g., STIX, TAXII, IOCs) desired
• Experience with cloud logging applications, AWS Cloudtrail, VPC Flow Logs, Lambda, etc.

What’s in it for you:

Within 30 days:

• You’ll focus on training and learning the basics of the company. This includes the company’s systems, procedures that should be adhered to, products and services, software, vendors, and/or clients.
• You’ll have been introduced to your team, colleagues and have 1:1’s to assimilate into the company culture.
• You will have the opportunity to learn the product in and out through training and a variety of resources. This then means that the majority of the things-to-do should fall along the lines of attending training sessions, gaining and mastering product knowledge, learning major corporate systems, meeting the members of your team, and getting the necessary access. 

Within 60 days:

• You’ll have a good grasp of your working environment and you can now move onto more advanced tasks. 
• You will start studying the best practices in the industry, create goals, meet up with your supervisor and get feedback on your performance, and build meaningful relationships with your co-workers along with taking on proper job responsibilities.  

Within 90 days

• You’ll demonstrate a firm grasp of the company and confidence in your job function. Thus, you should be preparing to make breakthrough contributions to your team or department. 
• The contributions may include finding new ways to improve security or coming up with ideas to save the company money. Instead of only identifying problems in the company, you should be at the forefront of brainstorming possible solutions. 
• You will be able to spearhead new initiatives and collaborate with other teams for the good of the company. 

What we offer

• Competitive compensation, including equity for all employees
• Unlimited Paid Time Off (PTO)
• 4 company-wide rest days in 2024 where the entire company rests and recharges!
• Generous health and welfare plans to choose from - including one employer-paid “employee-only” plan!
• Best-in-class Health Savings Account (HSA) employer contribution
• Affordable vision and dental plans for you and your family
• Employer-provided life and disability coverage with additional supplemental options
• Paid Parental Leave - Equal for all parents, including birth, adoptive & foster parents
• One year of diaper delivery for your newest addition to the family! It’s our way of welcoming new Pindroplets to the family!
• Identity protection through Norton LifeLock
• Remote-first culture with opportunities for in-person team events
• Recurring monthly home office allowance
• When we need a break, we keep it fun with happy hours, ping pong and foosball, drinks and snacks, and monthly massages!
• Remote and in-person team activities (think cheese tastings, chess tournaments, talent shows, murder mysteries, and more!)
• Company holidays
• Annual professional development and learning benefit
• Pick your own Apple MacBook Pro
• Retirement plan with competitive 401(k) match
• Wellness Program including Employee Assistance Program, 24/7 Telemedicine

What we live by

• Audaciously Innovate - We continue to change the world, and the way people safely engage and interact with technology. As first principle thinkers, we challenge standards, take risks and learn from our mistakes in order to make positive change and continuous improvement. We believe nothing is impossible.
• Evangelical Customers for Life - We delight, inspire and empower customers from day one and for life. We create a partnership and experience that results in a shared passion.   We are champions for our customers, and our customers become our champions, creating a universal commitment to one another. 
• Execution Excellence - We do what we say and say what we do. We are accountable for making the tough decisions and necessary tradeoffs to deliver quality and effective solutions on time.
• Win as a Company - Every time we win, we win as a company. Every time we lose, we lose as a company. We break down silos, support one another, embrace diversity and celebrate our successes. We are better together. 
• Make a Difference - Every day we have the opportunity to make a positive impact. We operate with dedication, passion, and uncompromising integrity, creating a safer, more secure world.

Not sure if this is you?

Pindrop is an Equal Opportunity Employer