[Hiring] Associate Security Analyst @Bloomreach

Role Description

Join the Bloomreach GIST (Global Information Security & Technology) team as an Associate Security Analyst and help protect our e-commerce environment from threats, vulnerabilities, and sophisticated attackers. Your work will have a significant impact on numerous customers across various e-commerce verticals and hundreds of millions of online users. As a core member of our globally distributed 24/7 Security Operations Team, you can work full-time from our India offices or from home.

Your job will be (but not limited to):

• Monitor, analyze & interpret security/system/application/infrastructure logs for events, configuration irregularities & potential incidents
• Leverage security tools, custom built dashboards and/or proactive identification approaches to detect anomalous activities
• Monitor Cloud infrastructure for security-related events
• Monitor threat/vulnerability landscape and security advisories, coordinate and escalate as appropriate
• Work with application security teams, product specialists, GRC, legal teams on active incidents and/or investigations
• Participate in a major incident call, document incident report summaries
• Document, follow and execute standard operating procedures (SOPs)
• Documenting/Managing/maintaining & following use cases, playbooks and/or knowledge base articles
• Work on incidents, requests related to security
• Own responsibilities within a shift with a positive mindset towards growth & upskilling

Qualifications

• 2+ years of hands-on experience as part of a 24/7 Security Operations team OR a starter with equivalent degree/specialization in the area of Cyber Security with a proven project dealing in the new age landscape (SaaS platform Security, SecOps, API/Container Security, Threat Intel/Hunting, Vulnerability Management)
• Hands-on experience or deep knowledge on usage of SIEM, SOAR, EDR (modules like TI, VM, DLP)
• Exposure or experience in using any of CSPM tools (SentinelOne, Falcon Horizon, Wiz, Sysdig, Prisma cloud, MS Defender)
• Exposure or experience in assessing, interpreting & managing vulnerabilities using relevant tools
• Knowledge of either AWS or GCP is a must
• Positive attitude to participate, own & drive tasks for POCs for various tools
• Understanding of risk framework
• Ability to assess emerging trends & threats in cyber security space
• Good analytical, problem-solving, and interpersonal skills; able to apply & provide logical reasoning
• Knowledge of NIST framework, OSINT standards, MITRE ATT&CK framework & cybersecurity incident lifecycle is an advantage; beginner level of understanding is mandatory
• Mandatory to work in a 24/7 rotation shift & weekends
• Excellent command of communication in English; being a good listener, speaker & reader

Requirements

• In the first 30 days you will:
• Understand the roles & responsibilities of SOC team, in-scope vs out of scope tasks
• Read & understand SOPs, Policies & working procedures of the team
• Shadow peers in day to day work, overlook tickets, alerts, incidents, understand the current state of ongoing projects/enhancements etc
• In the next 30 days you will (60 days from start):
• Start owning incidents, tasks as independent contributor with a peer shadowing you
• Participate in incident related calls, cross team/department meetings
• Handle SIEM/SOAR/EDR events
• In the next 30 days you will (90 days from start):
• Start documenting or tweaking existing SOPs, process document
• Bear responsibilities of representing team in forums/meetings/discussions
• Start managing shift alone when needed
• Adapt yourself to service improvement mindset and contribute to overall success of the team

Benefits

• A great deal of freedom and trust; no clocking in and out, and no corporate rules or long approval processes
• Defined 5 values and 10 underlying key behaviors embedded in processes like recruitment, onboarding, feedback, personal development, performance review and internal communication
• Flexible working hours to accommodate your working style
• Virtual-first work environment with several Bloomreach Hubs available across three continents
• Company events to experience the global spirit of the company
• Support for volunteering activities - every Bloomreacher can take 5 paid days off to volunteer
• Employee Assistance Program with counselors for non-work-related challenges
• Subscription to Calm - sleep and meditation app
• ‘DisConnect’ days where Bloomreachers globally enjoy one additional day off each quarter
• Facilitation of sports, yoga, and meditation opportunities
• Extended parental leave up to 26 calendar weeks for Primary Caregivers
• Restricted Stock Units or Stock Options based on role, seniority, and location
• Participation in the company's success through performance bonus
• Employee referral bonus of up to $3,000
• Celebration of work anniversaries - Bloomversaries