Security Analyst
The Analyst serves as a critical bridge, providing expert assistance, advanced deployment leadership, and proactive threat hunting capabilities.
In-Depth Investigation & Threat Hunting: Conduct in-depth investigations and proactive threat hunting within the NDR platform, as well as other security solutions (EDR, SIEM, etc.).
Advanced D&I Execution: Lead the enablement and operationalization phases by reviewing system descriptions, platform constraints, and operational designs (such as network communication ports and data flows).
Configuration & Onboarding: Configure Arista NDR Nucleus and Sensors, identify/collect network settings, validate appliance cloud connectivity, and assist with configuring third-party integrations (EDR, orchestration, and ticketing systems).
Knowledge Transfer: Deliver interactive, basic, and advanced knowledge transfer sessions to customers covering threat hunting, network forensics, incident response, and skill/adversarial model development.
Tier 1 Support & Oversight: Support T1 analysts with complex cases, provide mentorship, and review/approve all High and Critical cases and tuning adjustments.
Case Load & Prioritization: Closely monitor case queues, prioritizing Arista-related cases for timely resolution. Maintain situational awareness of overall case load and surge resources as needed.
Qualifications (General)
Experience: Demonstrated experience in a Security Operations Center (SOC) environment, with a strong background in network forensics, threat intelligence, or large-scale security technology deployments.
Technical Skillset: Familiarity with network communication ports, data flow design, SIEM logging configuration, backup/recovery best practices, and adversarial modeling language-based threat hunting.
Agility: Ability to work effectively in a dynamic, fast-paced environment and manage phased project methodologies under varying customer timelines.
Certifications: Relevant certification (e.g., CompTIA Security+, CEH, GIAC certifications) is a plus.