Security Analyst

<h2 style="text-align: left;"><strong>About the opportunity</strong></h2> <p>Contentful strives to build a secure and safe service and commits considerable effort and resources to security. Our Security team supports corporate-wide information security management programs and collaborates closely with internal teams. We believe that Security must be anchored by DevOps principles with strong repeatable processes.</p> <p>We are looking for a committed and driven Security Analyst with experience performing analysis and incident management of information security events. As an analyst, you will have daily alert investigation responsibilities, but you will be empowered to proactively drive change to shape and support the growth of our Security Operations program. Candidates should be skilled in detection management and demonstrate knowledge and understanding of common Information Security principles and frameworks, coupled with excellent communications skills and a continuous desire to learn and grow.</p> <p>You will be expected to work independently, work as a part of a team, and partner with stakeholders throughout the organization to ensure comprehensive risk mitigation while reducing impact to end users throughout the organization.</p> <h2 style="text-align: left;"><strong>What to expect?</strong></h2> <ul> <li>Perform daily alert investigation and response in a hybrid environment.</li> <li>Collaborate with the team and actively assist in major response exercises.</li> <li>Conduct detail-oriented analysis across challenging and complex ecosystems.</li> <li>Be capable of reporting or summarizing your findings to a broad audience.</li> <li>Create processes, documentation, and runbooks to support a rapidly growing organization.</li> <li>Take ownership of tuning, refinement, and development of detection use cases.</li> <li>Drive continuous improvement across all aspects of threat detection and response.</li> <li>Identify systemic issues and collaborate on approaches to address root causes.</li> <li>Play an active role in scaling Operation practices by contributing to team roadmaps.</li> <li>Provide delightful and informative interactions with all end users.</li> <li>Proactively identify opportunities for user training and awareness programs.</li> <li>Collaborate on threat models by incorporating detection use cases into designs.</li> <li>Assist in the creation of requirements and testing of security solutions.</li> </ul> <h2 style="text-align: left;"><strong>What you need to be successful?</strong></h2> <ul> <li>3+ years of Security Operations or Incident Response experience.</li> <li>Proficiency in analysis methods (e.g., log analysis, live response, forensics, etc.)</li> <li>Firm understanding of the evolving attacker Tactics, Techniques, and Procedures.</li> <li>Strong network fundamentals (e.g., TCP/IP, Layer 7 protocols, etc.)</li> <li>Ability to perform detailed host analysis on Mac, Windows, & Linux systems.</li> <li>Familiarity analyzing Software-as-a-Service log sources to support investigations.</li> <li>Practical experience using security technologies (e.g., SIEM, EDR, AntiVirus, Email, etc.)</li> <li>Exposure using Splunk in support of alert investigation across multiple data sources.</li> <li>Experience performing investigations in cloud service providers (e.g., AWS, GCP, Azure, etc.)</li> <li>Hands-on experience with malware analysis using dynamic and static analysis tools.</li> <li>Practical mindset to balance business needs with security requirements.</li> <li>Abilit ... (truncated, view full listing at source)