SOC Analyst II

Dive in and do the best work of your career at DigitalOcean. Journey alongside a strong community of top talent who are relentless in their drive to build the simplest scalable cloud. If you have a growth mindset, naturally like to think big and bold, and are energized by the fast-paced environment of a true industry disruptor, you’ll find your place here. We value winning together—while learning, having fun, and making a profound difference for the dreamers and builders in the world. Position Overview: We are looking for an Autonomous and proficient Security Analyst who is passionate about Cyber Security, Fraud and Abuse. As a Security Analyst at DigitalOcean, you will join a dynamic team dedicated to identify, investigate, and prevent fraudulent activities against DigitalOCean’s Platform. You will not only do that, What You’ll Do: Performing real-time monitoring of Security Events, fraudulent and abusive activities across DigitalOcean’s environment. Investigate, identify and prevent or mitigate abusive activities such as intrusion attempts, DDoS, malware distribution, phishing attacks, etc. originating from (or) to DigitalOcean Platform. Leverage industry standard security technologies such as SIEM, EDR and other monitoring tools to detect, investigate and respond to security alerts. Conduct proactive hunts to detect and eliminate security threats. Locating trends in abuse/threat vectors, communicating with leadership to apprise of extent, and advocating for appropriate product changes to prevent future occurrences. Work within a ticket management system with specific daily operational level targets completed with a quality resolution. Vetting abuse claims, responding to reporters and helping customers get back on the platform. Engineering approaches to gathering security data, turning it into useful insights, and working with tech teams to resolve threats. Responsible for the process to reduce false positives while preventing the bad-actors. Escalating security incidents to Senior Analyst or DFIR teams as needed for deeper analysis and remediation. Establishing an understanding of DigitalOcean’s entire production environment, from applications to infrastructure, keeping up-to-date with material changes and future directions. Building strong relationships with the other technical teams across our engineering and infrastructure functions. What You’ll Add to DigitalOcean: Bachelor's Degree or equivalent experience with 1 or more years of experience in Security operations. Knowledge of Security Information Event Management (SIEM) knowledge of the Security Operation Center (SOC) Understanding of TCP/IP concepts, application protocols and knowledge of database structures and working with Unix/Linux. Intellectual Curiosity and Self-Motivation to perform complex tasks. Clear written and verbal communications skills to include; technical writing, presenting. Consistently improving security as the platform scales, driving continuous improvement through data collection and correlation, being mindful that security should be an efficiency enabler for the business - not a detractor. Bonus: Ability to code, script, or automate classes of problems rather than handling them manually (eg.Python, Bash, Go, Ruby) *This job is located in Hyderabad, India #LI-Hybrid Why You’ll Like Working for DigitalOcean We innovate with purpose. You’ll be a part of a cutting-edge technology company with an upward trajectory, who are proud to simplify cloud and AI so builders can spend more time creating software that changes the world. As a member of the team, you will be a Shark who thinks big, bold, and scrappy, like an owner with a bias for action and a powerful sense of responsibility for customers, products, employees, and decisions. We prioritize career development. At DO, you’ll do the best work of your career. You will work with some of the smartest and most interesting people in the industry. We are a high-performance o ... (truncated, view full listing at source)