Job Closed

This listing is no longer active.

Arista Networks logo
Arista Networks

Data-Driven Networking

Security Operations Center Analyst

Security OperationsSecurity OperationsFull TimeRemoteSeniorTeam 1,001-5,000Since 2004H1B SponsorCompany SiteLinkedIn

Location

Poland

Posted

74 days ago

Salary

0

Seniority

Senior

Bachelor Degree4 yrs expEnglishLinux

Job Description

Security Operations Center Analyst

Arista Networks

• Monitor and triage security alerts. • Build, test, and refine detections to enhance threat identification across Mac, Linux, and Windows systems. • Conduct in-depth analysis of security incidents, including malware, phishing, and advanced persistent threats, leveraging SIEM and EDR capabilities. • Perform proactive threat hunting using the SIEM and EDR features. • Investigate and respond to incidents swiftly, following established incident response protocols. • Document findings clearly and provide actionable remediation recommendations. • Collaborate with cross-functional teams to strengthen security controls and mitigate vulnerabilities. • Stay current on emerging threats, vulnerabilities, and industry trends through self-directed learning. • Participate in on-call rotation for 24x7x365 SOC coverage, demonstrating reliability and accountability. • Escalate confirmed or suspicious incidents and cases to the Incident Response team.

Job Requirements

  • 4-5+ years in a SOC and or active participant on incident response teams.
  • Hands-on experience with CrowdStrike (or other EDR), triaging security incidents.
  • Proven ability to write CQL (or similar) queries and build detections for threat monitoring.
  • Experience triaging alerts in a high-volume environment.
  • Experience with threat intelligence feeds, platform and OSINT tools (VirusTotal, etc.)
  • Familiarity with forensic analysis and evidence handling.

Benefits

  • Health insurance
  • Professional development opportunities

Related Categories

Related Job Pages

More Security Operations Jobs

Everbridge logo

Security Operations Associate

Everbridge

After 9/11, Everbridge was founded to improve the way people communicate and find one another in critical situations. Through its Software-as-a-Service-based communications platfor

• Maintain operational and administrative oversight of assigned potential, live, and completed security projects • Support projects from inception through completion, including planning, execution, administration, and follow-up • Manage all related client and vendor communications • Ensure Salesforce Health Cloud (SFHC), Salesforce (SFDC), and SharePoint are accurate, current, and complete • Collaborate closely with Security Operations team members to provide operational support and coordination • Administer Secure Journey Management tasks, including car and driver, close protection, and meet-and-greet services • Create and manage SFHC cases, SharePoint folders, task checklists, and risk assessments • Liaise with clients to gather requirements and vendors to source and validate quotations • Prepare service proposals, quotations, letters of engagement (LOEs), and related documentation • Apply rate cards, taxes, exchange rates, and margins accurately • Coordinate approvals, supplier confirmations, purchase orders, and invoicing • Monitor live tasks, manage updates, and ensure post-task closure and financial reconciliation • Assist with operational security requests received via Everbridge Assist • Provide initial acknowledgment and administrative setup for short-notice Secure Journey Management requests • Monitor and respond to operational communication channels (email, Slack, Teams, WhatsApp) • Review monthly open purchase order reports and provide feedback • Maintain accurate records and documentation across all systems

United States
$50K - $66K / year
Job Closed
August Schell logo

Cyber Defense Infrastructure Specialist (Top Secret Required)

August Schell

August Schell offers 30 years of experience in providing our customers innovative solutions and engineering services to their most challenging needs. We thrive on navigating complex IT difficulties and are driven to find the best solutions for our customers. Our team delivers expert knowledge in cyber security, big data, endpoint security and cloud solutions. Our ability to serve our customers with continued excellence is a direct reflection of our dedicated and exceptional people. At August Schell, we are not only a team, we are a family. Equal Employment Opportunity August Schell Enterprises Inc. is an Equal Employment Opportunity Employer. We are committed to providing a workplace that is free from discrimination and harassment based on race, color, religion, sex (including pregnancy, sexual orientation or gender identity), national origin, age, marital status, disability, protected veteran status or any other characteristic protected by applicable law. Accommodations If you are an individual with a disability and would like to request a reasonable accommodation during the application or hiring process, please contact Human Resources at [email protected] Note This job description in no way states or implies that these are the only duties to be performed by the employee(s) of this position. Employees will be required to follow any other job-related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments. All duties and responsibilities are essential functions and requirements and are subject to possible modification to reasonably accommodate individuals with disabilities. This is a pipeline position contingent upon future contract award.

Full TimeRemoteTeam 51-200

Title: Cyber Defense Infrastructure Support Specialist Clearance: Active TS Required, Q Clearance preferred Education: Bachelor’s degree preferred Years Experience: all levels available Location: fully remote Compensation: DOE ($55k/yr-$115k/yr.) A Cyber Defense Infrastructure Support Specialist is responsible for the maintenance, enhancement, and protection of an organization's cyber defense infrastructure. This role involves safeguarding critical data and network resources, ensuring operational integrity, and preventing disruptions due to malicious activities. The specialist works closely with multiple teams to align cybersecurity measures with organizational goals and supports secure and efficient operations. Duties include: - Installing, configuring, and managing security software and hardware, conducting vulnerability assessments, and developing comprehensive security policies and protocols. - Monitor network traffic for unusual activity, respond to incidents, and coordinate with other IT professionals to mitigate threats. - Systematic & continuous updates with the latest cyber defense tactics and technological advancements are essential for maintaining a robust security posture. Note This job description in no way states or implies that these are the only duties to be performed by the employee(s) of this position. Employees will be required to follow any other job-related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments. All duties and responsibilities are essential functions and requirements and are subject to possible modification to reasonably accommodate individuals with disabilities. Who we are...  August Schell offers 30 years of experience in providing our customers innovative solutions and engineering services to their most challenging needs. We thrive on navigating complex IT difficulties and are driven to find the best solutions for our customers. Our team delivers expert knowledge in cyber security, big data, endpoint security and cloud solutions. Our ability to serve our customers with continued excellence is a direct reflection of our dedicated and exceptional people. At August Schell, we are not only a team, we are a family. Equal Employment Opportunity August Schell Enterprises Inc. is an Equal Employment Opportunity Employer. We are committed to providing a workplace that is free from discrimination and harassment based on race, color, religion, sex (including pregnancy, sexual orientation or gender identity), national origin, age, marital status, disability, protected veteran status or any other characteristic protected by applicable law. Accommodations If you are an individual with a disability and would like to request a reasonable accommodation during the application or hiring process, please contact Human Resources at hr@augustschell.com Apply Now

United States
$55K - $115K / year
GitLab logo

Senior Manager, Security Incident Response Team (USA)

GitLab

Build software faster. The One DevOps Platform enables your entire org to collaborate around your code. We're hiring.

Full TimeRemoteTeam 1,001-5,000Since 2014H1B No Sponsor

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. *Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this roleWe’re looking for a senior manager to lead the GitLab security incident response team (SIRT) in the Americas region. GitLab SIRT manages and investigates cybersecurity incidents for all GitLab operating environments and operates in a tierless SOC model. GitLab SIRT is responsible for threat hunting, alert triage, security investigations, deep dive DFIR, large scale incident response, among other responsibilities. This person should have a technical background, be comfortable leading a team that owns the full incident lifecycle from alert triage to incident retrospective actions, be skilled in leading large complex incidents, and training others to do the same. We are looking for a person who makes good business decisions under pressure and someone who is always looking for opportunities to “shift left” and improve defenses, leveraging AI and automation where possible to optimize workflows. In this role you will develop incident responders and maintain a culture of high performance - leading incident response and defending GitLab infrastructure and products such as GitLab.com, GitLab Dedicated, and GitLab Dedicated for Government (FedRAMP). This role requires availability during US West Coast business hours. Candidates based on the West Coast are preferred, though candidates in other time zones who are comfortable working these hours are also welcome to apply. This role may require some after hours and weekend time to support SIRT engineers during high severity incidents. Find out more about the Security Operations Department here: - Security Incident Response Team - Trust and Safety Team - Security Logging Team - Red Team - Signals Engineering Team What you’ll do - Serve as trusted advisor as part of the security division’s leadership team, actively shaping the program direction. - Build and mature incident response runbooks, procedures, and capabilities. - Provide leadership to multiple security operations team shifts that will sometimes require you to work on nights or weekends. - Develop a culture of incident response excellence through a focus on investigation depth and accuracy. - Lead cross-functional collaboration between peer SecOps teams, security departments, and extended support teams such as Legal, Customer Support, and Infrastructure. - Foster a defense first mindset through actionable incident retrospective mitigations to close defense gaps, making GitLab a hard target for attackers. - Lead a team of expert security engineers with experience in security automation, deep dive forensics and incident response, AI detection and response capabilities, and GitLab the product. - Support response readiness and expertise about new GitLab corporate and product capabilities and features. - Drive insights from the alerts, investigations, and incidents handled by SIRT to improve the security posture of GitLab. What you’ll bring - Experience assisting customers during high visibility and urgency security incidents and being comfortable representing GitLab Security during customer cybersecurity questions and escalations. - Proven ability to deliver results across a global incident response team of 10+ engineers, and matrixed teams such as the Security division, and supporting R&D teams (Product, Engineering, Infrastructure, etc). - Proven experience in incident response leadership and large scale incident coordination. - Experience conducting investigations and log analysis using SIEM tools, such as Splunk or Elastic. - Working knowledge of Google Cloud Platform (GCP) and/or AWS as well as cloud forensics - Proficiency in proactive hunting based on threat intelligence - Experience using GitLab (or a related DevSecOps platform like GitHub) for project tracking - Bonus points if you have experience responding to threats against a SaaS platform. - A passion for investigation quality and depth of analysis - prioritizing quality over speed. - Experience using AI/LLMs to automate and improve incident response processes and capabilities. - An understanding of supply chain threats and how to defend a SaaS platform against such threats. About the team The Security Incident Response Team is a globally distributed team of incident response engineers split across three core regions; AMER, APAC and EMEA, and is at the forefront of security events that impact both GitLab’s products and company. We are both proactive and reactive, responding to security alerts, leading security investigations, conducting threat hunts and collaborating with peer Security Operations teams to conduct purple teaming exercises, build threat detections, improve security telemetry and investigate trending threats. Even though we’re a global team, we work together in a cross-regional manner and have automation and processes to facilitate collaboration when resolving incidents, handovers, and general collaboration for project work as well. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $168,000—$280,000 USD How GitLab will support you - Benefits to support your health, finances, and well-being - Flexible Paid Time Off - Team Member Resource Groups - Equity Compensation & Employee Stock Purchase Plan - Growth and Development Fund - Parental leave - Home office support Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process.

United States
$168K - $280K / year
Job Closed
Airbnb logo

Engineering Manager, Investigations and Incident Response

Airbnb

Airbnb is a community based on connection and belonging.

Full TimeRemoteTeam 5,001-10,000Since 2007H1B Sponsor

Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays and experiences that make it possible for guests to connect with communities in a more authentic way. The Community You Will Join: The Threat Detection and Response team (TDR) at Airbnb is focused on automating security detection, responding to security incidents, and working with partner teams to build capabilities that support the incident lifecycle. This is the front-line team that detects, investigates, and responds to security threats and malicious activity. We are seeking an Engineering Manager to lead our Investigations & Incident Response team within a mature Threat Detection & Response organization. This is a key role that combines incident response leadership, strategic ownership, and engineering-informed scale. The Difference You Will Make: - You will define and execute new approaches to detecting, containing, and mitigating security threats and incidents, while driving the next stage of maturity for our investigations and response capabilities. - You will own incident response and investigation outcomes, leading end-to-end response across identification, containment, eradication, and recovery. - You’ll shape how the team operates—evolving operating models, guiding execution during incidents, and scaling through thoughtful use of automation and engineering. - You will define and drive the strategy for a modern incident response function, ensuring high-quality investigations and that every incident leads to meaningful improvements in our detection and response capabilities. - You’ll assess current capabilities and chart the path forward across people, process, and technology, evolving the operating model to support effective global response. - You will scale the function through automation, tooling, and improved workflows—solving repeatable problems with systems, not manual effort. - You will serve as a key voice to senior leadership, communicating incident trends, risks, and strategic direction, and partner across the company to turn incident learnings into durable security improvements resulting in removal of entire classes of problems. A Typical Day: - Lead and mentor a diverse team of ~5+ senior engineers - Partner with Security Platform and Detection Engineering teams to enhance telemetry, context, and response capabilities, and collaborate closely with key teams in Infrastructure Security, Application Security, Infrastructure teams, Legal, Privacy, Global Safety and Security, and Engineering teams across the organization. - Coach and develop team members, help them grow their careers, technical expertise, and collaboration skills. - Act as a senior escalation point during high-severity or complex incidents - Ensure consistent, high-quality investigations with strong root cause analysis - Establish clear priorities that balance speed, depth, and risk reduction - Improve escalation paths, ownership clarity, and cross-functional coordination - Use incident data to influence security priorities and investment decisions - Partner closely with partner teams within Information Security to ensure incident learnings are shared and added to roadmaps for security risk reduction - Work with infrastructure, product, and engineering teams to drive effective remediation - Define and track key metrics such as MTTD, MTTR, incident severity, and recurrence - Ensure clear communication during incidents to senior and executive leadership including updates on insights from incident patterns, trends, and emerging risks Your Expertise: - 9+ years of industry experience in threat detection and incident response, with a minimum of 3-5 years in engineering management. - Experience shaping or evolving incident response programs in complex environments - Exceptional people management and mentorship skills, with a history of recruiting, developing and retaining top talent - Strong understanding of attacker behavior and frameworks such as MITRE ATT&CK - Experience and understanding of technologies such as EDR, SIEM, cloud environments, and investigation workflows - Experience in cloud-native environments (AWS, GCP, Azure) - Ability to analyze ambiguous situations and make sound, timely decisions - Comfort partnering with engineering teams to build scalable solutions - Ability to operate at both strategic and tactical levels, from executive communication to incident leadership - Experience defining team strategy, priorities, and operating models - Strong judgment in risk assessment, escalation, and trade-offs - Excellent communication skills across technical and executive audiences Your Location: This position is US - Remote Eligible. The role may include occasional work at an Airbnb office or attendance at offsites, as agreed to with your manager. While the position is Remote Eligible, you must live in a state where Airbnb, Inc. has a registered entity. Click here for the up-to-date list of excluded states. This list is continuously evolving, so please check back with us if the state you live in is on the exclusion list. If your position is employed by another Airbnb entity, your recruiter will inform you what states you are eligible to work from. Our Commitment To Inclusion & Belonging: Airbnb is committed to working with the broadest talent pool possible. We believe diverse ideas foster innovation and engagement, and allow us to attract creatively-led people, and to develop the best products, services and solutions. All qualified individuals are encouraged to apply. We strive to also provide a disability inclusive application and interview process. If you are a candidate with a disability and require reasonable accommodation in order to submit an application, please contact us at: reasonableaccommodations@airbnb.com. Please include your full name, the role you’re applying for and the accommodation necessary to assist you with the recruiting process. We ask that you only reach out to us if you are a candidate whose disability prevents you from being able to complete our online application. How We'll Take Care of You: Our job titles may span more than one career level. The actual base pay is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. This role may also be eligible for bonus, equity, benefits, and Employee Travel Credits. Pay Range $204,000—$255,000 USD

United States
$204K - $255K / year