[Hiring] Security Analyst @Stripe

Role Description

You will be leveraging your security incident response experience to analyze and respond to security notifications, events, and inquiries. Your responsibilities include:

• Performing initial triage of potential security incidents through log and data analysis to determine whether or not activity is a substantiated or valid threat.
• Assessing severity and potential impact, taking pre-approved remediation measures to contain a threat, and escalating findings to investigators for further review and analysis.
• Using your knowledge of cyber threats and the results of your analysis to coordinate with partner teams to improve threat detection through tuning and creation of new use cases.
• Improving capabilities through enriching existing data and creation of new data feeds.
• Enhancing triage accuracy, consistency, and timeliness through automation.

This role plays a critical part in threat detection and response, ultimately reducing the likelihood of security breaches and protecting sensitive company information.

Qualifications

• 5+ years experience in information technology or cyber security roles including incident response.
• 2+ years experience analyzing large data sets to solve problems and/or manage projects related to security event triage and/or workplace investigations.
• Prior experience investigating and triaging security threats on endpoint devices including Mac, Linux, and Windows, as well as cloud infrastructure across AWS, Azure, and GCP.
• B.S. or M.S. in Cyber Security and Information Assurance, Data Analytics, Computer Science or related field, or equivalent experience.
• Working knowledge of SQL.
• Basic knowledge of scripting or programming in Python, Go, or other programming languages.
• Proven experience with log querying and analysis (e.g. first or third party applications, system/data access, event logs), digital forensics, or incident response using one or more industry standard SIEM Platforms (Splunk, Sentinel, Chronicle, Elastic, etc.).
• Proficiency using analytical methods to inform detection systems or guide strategic response.
• Strong cross-functional collaboration and written/verbal communication skills.
• Ability to think creatively and holistically about identifying and reducing risk in a complex environment.
• High level of judgment, objectivity, and discretion.

Requirements

• Prior experience working with high volume data in a security incident response environment.
• Experience with data processing and analysis tools (e.g. Jupyter Notebooks, Databricks).
• An adversarial mindset, understanding the goals, behaviors, and TTPs of threat actors.
• Ability to leverage threat intelligence and/or hunting concepts in an enterprise environment.
• Experience in one or more of the following areas: user and entity behavior analytics (UEBA), SOAR/security automation, security information event management (SIEM), data loss prevention (DLP), Information Security, or Data Privacy.
• One or more security certifications through a recognized industry provider: GIAC, ISACA, ISC2, OffSec, CompTIA, etc.