Security Analyst - SDR Security Operations

Security Analyst - SDR Security Operations Responsibilities:

• Investigate and respond to external and internal cybersecurity threats in a timely manner while communicating clearly and proactively until remediation
• Drive changes to processes that scale across teams and regions and affect organizations outside Security
• Act as an escalation point for Tier1 investigations, contribute to the development of the Tier1 capability and related service level objectives
• Document security investigations and produce high quality and accurate reports for a wide range of stakeholders
• Collaborate with Security Engineers and cross-functional teams to investigate and remediate large scale security incidents
• Support security incidents root cause analysis, identify control gaps and recommend mitigation strategies
• Collaborate with cross-functional teams to drive improvements to security policies, processes and tools
• Improve the effectiveness and efficiency of the Security Operations and Incident Response team including development and refinement of processes and technical capabilities
• Understand and support requirements of internal and external stakeholders, regulators, and auditors

Minimum Qualifications:

• Bachelor’s or Master's degree in Computer Science or related technical field, or equivalent experience in cyber security
• 5+ years of professional experience in a Security Operations Center, Incident Response, or relevant investigative role
• 5+ years of experience navigating and understanding Windows, macOS, and Linux operating systems
• Knowledge of networking technologies, specifically TCP/IP and related protocols
• Experience analyzing network and host-based security events
• Professional experience using a wide range of investigative tools including EDR, SIEM/SOAR, UBA
• Professional experience with database query languages (e.g., SQL)
• Professional experience handling digital forensic evidence and developing reports to support internal investigations
• Experience with attacker tactics, techniques, and procedures
• Experience making important decisions independently and multi-tasking under pressure
• Experience responding quickly to changing situations without compromising quality

Preferred Qualifications:

• Previous experience as a Lead Security Analyst in a large and regulated organization
• Experience handling and triaging malware
• Experience driving changes to processes and tools that scale across a global security operations team
• Experience working in a 24x7 operational environment, and a track record of defining, implementing and measuring success of operational programs

About Meta: