Sr Security Analyst

Position Overview

Serving in the role ofSenior SecurityAnalyst you will join Vectras MXDR team and use your knowledge of attack and penetration techniques to analyze and interpret real and persistent threats against our customers piece together indicators of an attack to enumerate the kill-chain and explain the observed threats in a meaningful and actionable way to both prospects and customers. This is a customer-facing role.

You will be responsible for post sales customer engagement planning optimization and follow-on services and support of the Vectra Platform along with EDR and 3rd party integrations at customer sites. The successful candidate will have sound technical experience and skills blended with strong interpersonal communication and project management skills.

You will resolve complex cyber security challenges and help customers learn how to distinguish benign from malicious network behavior. Leveraging cloud data and advanced machine learning models you will apply your experience in defending vulnerabilities in real-world networks to anticipate customer challenges and help progress the core technologies of the company with a focus on empowering customers to get ahead of the threat.

This is a highly technical role and deep knowledge of Linux and networking is required as well as a strong background in security. Resolving customer issues routinely includes working in complex product and infrastructure configurations problem troubleshooting and isolation performance tuning and optimization.

When not working with customers and analyzing the threats present within their networks as an Analyst you are expected to research new security topics engage in bug-hunts and contribute to the community in a way that helps grow both your personal and company brands. As the voice of the customer you will be an integral part of our success.

Your role at a glance

• Engage with enterprise customers as a Vectra product expert to support implementation of the Vectra solution at their sites.

• Assist customers with the integration of Vectra into existing ecosystem and tools
• Conduct health checks and architecture reviews providing technical expertise and real-life experience in creating solutions designs and recommendations
• Identify blind spots in customer network security architecture and provide expert guidance on remediation
• Be a strong voice for your customers across business to identify new detection models identify new product features build content for both internal and external customer knowledge bases and ensure that successful Vectra deployments.
• Drive high levels of customer satisfaction

• Provide training and guidance to customers in proper usage of the Vector platform.

• Analyze threats piece-together exploitation trails and study lateral movements of attackers within customer networks
• Expertly explain to customers your conclusions and recommendations for mitigating or remediating an in-progress attack
• Provide an attackers-eye-view to the evidence presented by the clients products and educate customers to the technical nature of the threat
• Pursue security research topics that contribute to the knowledge and enumeration of new threats

• Travel expected 20-30%

To be successful in your new role you have

• Solid experience working in a technical customer-facing role or in an end user/customer environment
• Relevant professional security consulting experience
• Demonstrated experience in working with broad cross-functional teams
• Exceptional ability of presenting and explaining technology to people with less technical knowledge
• Excellent organizational analytical and writing skills
• Ability to work independently and adapt quickly

The technical essentials

• Good understanding of security product lines (firewalls sandboxing SIEM forensics-type platforms)
• Understanding of network architectures including SPAN/mirroring configuration & network monitoring technologies (switching technologies)
• Understanding of network protocols such as TCP/IP DHCP DNS NAT VPN PKI RADIUS etc.

• Good understanding of SQL and non-SQL databases

• Proficiency with packet capture tools PCAPs and their analysis

• Experience with EDR tools including Crowdstrike Microsoft Defender for Endpoint (MDE)& SentinelOne

Experience that impresses us as a plus

• Experience with Active Directory LDAP VPN firewalls policy management and LAN/WAN/Internet services administration
• Understanding of Cloud architecture for AWS and/or Azure; experience deploying in Cloud (AWS/Azure) architecture environments

• Scripting skills (preferably Python or Powershell) highly desired. Open source development a plus.

• Experience working with LLMs prompt design & iteration