ISC2 East Bay Chapter · 2 days ago
Senior Security Analyst – Heartflow
San Francisco, CA
Full-time
Onsite
Mid, Senior Level
$75K/yr - $100K/yr
2+ years expHeartflow is a medical technology company advancing the diagnosis and management of coronary artery disease using cutting-edge technology. The role involves analyzing complex security telemetry to uncover hidden threats and ensure a resilient defense for corporate and product environments.
Computer & Network Security
Responsibilities
Perform in-depth analysis of security events, logs, and network traffic using SIEM, EDR, and other security tools to rapidly identify, contain, and remediate complex threats
Collaborate in developing and implementing custom correlation rules, dashboards, and alerts to enhance detection capabilities
Drive threat hunts to find “quiet” persistent threats within our clinical and corporate environments
Participate in continuous refinement of incident response playbooks, operational procedures, and security standards
Perform security reviews of third-party vendors to identify risks and ensure they meet company standards
Qualification
Required
BS in Computer Science or a related technical degree. No degree? No problem—if you have the equivalent experience and certifications, we want to hear from you
At least 2 years in the trenches of a SOC or Incident Response team. However, if you haven't held a formal 'Security' title but have at least 2 years on an IT Operations team, we value deep technical expertise in operating systems and networking if you can show us your passion for security
Comfortable navigating security platforms like SIEMs, EDR tools (CrowdStrike or similar), and Email Security platforms
Strong problem-solving skills with the ability to troubleshoot security issues across networks, operating systems, and applications
Possess a solid understanding of log correlation and how to write logic for security alerts
Deep understanding of at least one of the operating system internals (Windows, Linux, or macOS). Ability to analyze process trees
Able to analyze network flows and packet data to find hidden threats. You know your way around network tools and can spot anomalies across different types of environments
Preferred
Certifications: SANS GIAC (GCIH, GCIA), CompTIA (Security+, CySA+), EC-Council (C|SA) or equivalent
Proven ability to take initiative— track record of identifying problems and developing solutions independently
Excellent written and verbal communication skills, with the ability to clearly articulate complex technical issues and remediation plans to both technical and non-technical audiences
You are a continuous learner who stays curious about the latest attack trends and loves figuring out how to stop them
Company
ISC2 East Bay Chapter
The mission of the ISC2 East Bay Chapter is to: Be Safe and Secure, Build a community for local professionals, Provide career development and CPE opportunities to our members, and Promote industry awareness and best practices.
11-50 employees
Funding
Current Stage
Early StageCompany data provided by crunchbase