Note: The job is a remote job and is open to candidates in USA. Rubrik is a leader in data protection and AI operations, seeking a SOC Security Analyst to enhance their security initiatives. The role involves monitoring security alerts, managing incident responses, and collaborating with various teams to protect customer and internal data.
Responsibilities
- Monitor and respond to security alerts across Rubrik’s corporate network, endpoints, cloud, and SaaS environments
- Rapidly detect and accurately identify signs of intrusions and other malicious activity
- Manage the end-to-end incident response lifecycle, encompassing triage, deep-dive investigations, and remediation to ensure accurate identification of root causes and organizational impact
- Partner with vulnerability management, FedRAMP, and engineering teams to assess threats, prioritize vulnerabilities, and drive timely remediation efforts
- Collaborate with cross functional teams to drive resolution of events
- Contribute to overall program maturity through providing feedback and ideas to refine and improve detection capabilities and response processes
- Update and maintain accurate incident case attributes and investigation details
- Reviewing, documenting, and updating existing SOC processes
Skills
- Bachelor's degree in Cybersecurity, Information Systems, or other related technical disciplines, or equivalent experience
- 3+ years of experience in Security Operations Center including security investigations and incident response
- Excellent communication and writing skills, with experience in direct written communication and report writing; effectively telling the details of what happened
- Experience utilizing incident analysis and investigation techniques. Applying and optimizing playbooks as a process
- Experience with any SIEM, EDR solution or incident analysis and response tools
- Experience with cloud native security solutions (Azure Defender, Google Security Command Center, AWS GuardDuty)
- Working knowledge of cloud infrastructure and security concepts (AWS, Azure, GCP)
- Problem solving and analytical thinking. An excellent ability to assess situations, identify potential risks, and make sound judgments based on available information
- Excellent real time collaboration and teamwork skills. Ability to collaborate effectively, share information, and coordinate efforts to address threats
- Demonstrated experience or strong interest in applying AI/automation to enhance security operations efficiency and scalability
- Ability to work a standard schedule aligned with Pacific Time Zone hours
- Know, acknowledge, and follow system-specific security policies and procedures
- Protect data and individual privacy per requirements and regulations
- Perform ongoing activities in compliance with service and contractual obligations
- Participate in role-based training, completing assignments on a timely basis
- Report security issues promptly, and aid investigation when needed
- Support controlled changes and vulnerability remediation activities
- Work collaboratively with Information Security in designing, implementing, assessing or enhancing system-specific security and privacy controls
- Relevant Security Certifications (SANS, CompTia, ISC2, etc.)
Benefits
- Bonus potential
- Equity
- Benefits
Company Overview