200+ applicants

Company

hims & hers · 1 day ago

Sr. Security Analyst

United States

Full-time

Remote

Senior Level

$105K/yr - $120K/yr

5+ years exp

Maximize your interview chances

Health CareLifestyle

Actively Hiring

Insider Connection @hims & hers

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Oversee the continuous monitoring and in-depth analysis of network traffic, system logs, and security alerts, employing cutting-edge SIEM solutions and leveraging advanced threat intelligence feeds to detect and respond to sophisticated cyber threats

Develop, refine, and lead the execution of advanced incident response plans and procedures, orchestrating multifaceted incident handling activities with a focus on rapid containment, eradication, and recovery. Serve as the ultimate technical authority during high-stress security incidents

Lead the identification and prioritization of vulnerabilities across our intricate technology stack, conducting comprehensive vulnerability assessments and overseeing advanced remediation efforts, including penetration testing and code review

Utilize your extensive knowledge of AWS, Azure, and GCP security best practices to assess and enhance the security of cloud environments. Implement and maintain security configurations, identity and access controls, and encryption mechanisms specific to each cloud platform. Conduct security assessments and audits to identify vulnerabilities and provide recommendations for remediation

Maintain an expert understanding of emerging cybersecurity threats and trends, actively integrating advanced threat intelligence into security operations to drive proactive threat detection and support the development of custom threat-hunting methodologies

Spearheaded the development and deployment of highly sophisticated scripts, automation tools, and custom security solutions to optimize and streamline complex security tasks, enhance operational efficiency, and enable rapid response to evolving threats

Prior experience with Threat Hunting and making recommendations on findings

Experience in Red team, Blue team, Purple team, and table top exercise

Recommend and implement security enhancements to proactively address emerging threats

Assist in the development and enforcement of security policies, standards, and procedures

Prior experience with industry regulations and standards, such as NIST, CIS, and GDPR

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Security MonitoringIncident ResponseVulnerability AssessmentAWS SecurityAzure SecurityGCP SecurityThreat IntelligenceSecurity AutomationPythonPowerShellCloud ComputingSumo LogicPenetration TestingRegulatory ComplianceNetskopeCrowdStrikeTenableCisco MerakiProofpointBurp SuiteKali LinuxMetasploitNexposePalo Alto FirewallsCisco VPNsPalo Alto IDSNISTCISGDPRTeamwork Abilities

Required

Bachelor's degree in a relevant field or equivalent work experience

Minimum of 5 years of experience in a security analyst role

Experience with Python and Powershell scripting

Strong expertise in cloud computing, with a preference for AWS

Proficiency in Sumo Logic for creating Insights and Signals

Experience researching through logs for security investigations

Familiarity with security platforms such as Netskope, CrowdStrike, Tenable, Cisco Meraki, and Proofpoint, or similar products

Excellent problem-solving and analytical skills

Strong communication, documentation, and teamwork abilities

Ability to work independently and under pressure in a fast-paced environment

Exposure to penetration testing platforms such as Burp Suite, Kali Linux, Metasploit, Nexpose

Skilled with network security tools such as Palo Alto Firewalls, Cisco VPNs, Palo Alto IDS

Understanding of regulatory compliance (NIST CSF, SOX, ISO)

Advanced Security Monitoring and Analysis: Oversee the continuous monitoring and in-depth analysis of network traffic, system logs, and security alerts, employing cutting-edge SIEM solutions and leveraging advanced threat intelligence feeds to detect and respond to sophisticated cyber threats

Incident Response Mastery: Develop, refine, and lead the execution of advanced incident response plans and procedures, orchestrating multifaceted incident handling activities with a focus on rapid containment, eradication, and recovery. Serve as the ultimate technical authority during high-stress security incidents

Vulnerability Assessment and Management Expertise: Lead the identification and prioritization of vulnerabilities across our intricate technology stack, conducting comprehensive vulnerability assessments and overseeing advanced remediation efforts, including penetration testing and code review

AWS, Azure, and GCP Security Expertise: Utilize your extensive knowledge of AWS, Azure, and GCP security best practices to assess and enhance the security of cloud environments. Implement and maintain security configurations, identity and access controls, and encryption mechanisms specific to each cloud platform. Conduct security assessments and audits to identify vulnerabilities and provide recommendations for remediation

Pioneering Threat Intelligence Integration: Maintain an expert understanding of emerging cybersecurity threats and trends, actively integrating advanced threat intelligence into security operations to drive proactive threat detection and support the development of custom threat-hunting methodologies

Master of Security Automation and Tooling: Spearheaded the development and deployment of highly sophisticated scripts, automation tools, and custom security solutions to optimize and streamline complex security tasks, enhance operational efficiency, and enable rapid response to evolving threats

Prior experience with Threat Hunting and making recommendations on findings

Experience in Red team, Blue team, Purple team, and table top exercise

Recommend and implement security enhancements to proactively address emerging threats

Assist in the development and enforcement of security policies, standards, and procedures

Prior experience with industry regulations and standards, such as NIST, CIS, and GDPR