[Hiring] Security Analyst @Stripe

Role Description

You will be leveraging your security incident response experience to analyze and respond to security notifications, events, and inquiries. Your responsibilities include:

• Performing initial triage of potential security incidents through log and data analysis.
• Assessing severity and potential impact of threats.
• Taking pre-approved remediation measures to contain threats.
• Escalating findings to investigators for further review and analysis.
• Coordinating with partner teams to improve threat detection and response capabilities.
• Reducing the likelihood of security breaches and protecting sensitive company information.

Qualifications

• 5+ years experience in information technology or cyber security roles including incident response.
• 2+ years experience analyzing large data sets related to security event triage and/or workplace investigations.
• Prior experience investigating and triaging security threats on endpoint devices (Mac, Linux, Windows) and cloud infrastructure (AWS, Azure, GCP).
• B.S. or M.S. in Cyber Security and Information Assurance, Data Analytics, Computer Science or related field, or equivalent experience.
• Working knowledge of SQL.
• Basic knowledge of scripting or programming in Python, Go, or other programming languages.
• Proven experience with log querying and analysis using industry standard SIEM Platforms (e.g. Splunk, Sentinel, Chronicle, Elastic).
• Proficiency using analytical methods to inform detection systems or guide strategic response.
• Strong cross-functional collaboration and written/verbal communication skills.
• Ability to think creatively and holistically about identifying and reducing risk in a complex environment.
• High level of judgment, objectivity, and discretion.

Requirements

• Prior experience working with high volume data in a security incident response environment.
• Experience with data processing and analysis tools (e.g. Jupyter Notebooks, Databricks).
• An adversarial mindset, understanding the goals, behaviors, and TTPs of threat actors.
• Ability to leverage threat intelligence and/or hunting concepts in an enterprise environment.
• Experience in one or more of the following areas: user and entity behavior analytics (UEBA), SOAR/security automation, security information event management (SIEM), data loss prevention (DLP), Information Security, or Data Privacy.
• One or more security certifications through a recognized industry provider (e.g. GIAC, ISACA, ISC2, OffSec, CompTIA).