Senior Security Analyst

Vectra® is the leader in AI-driven threat detection and response for hybrid and multi-cloud enterprises.

The Vectra AI Platform delivers integrated signal across public cloud, SaaS, identity, and data center networks in a single platform. Powered by patented Attack Signal Intelligence, it empowers security teams to rapidly prioritize, investigate and respond to the most advanced cyber-attacks. With 35 patents in AI-driven threat detection and the most vendor references in MITRE D3FEND, organizations worldwide rely on the Vectra AI to move at the speed and scale of hybrid attackers. For more information, visit www.vectra.ai.

Position Overview

Serving in the role of Senior Security Analyst , you will join Vectra's MXDR team and use your knowledge of attack and penetration techniques to analyze and interpret real and persistent threats against our customers, piece together indicators of an attack to enumerate the kill-chain, and explain the observed threats in a meaningful and actionable way to both prospects and customers. This is a customer-facing role.

You will be responsible for post sales customer engagement, planning, optimization, and follow-on services and support of the Vectra Platform along with EDR and 3rd party integrations at customer sites. The successful candidate will have sound technical experience and skills, blended with strong interpersonal, communication, and project management skills.

You will resolve complex cyber security challenges and help customers learn how to distinguish benign from malicious network behavior. Leveraging cloud data and advanced machine learning models, you will apply your experience in defending vulnerabilities in real-world networks to anticipate customer challenges and help progress the core technologies of the company – with a focus on empowering customers to get ahead of the threat.

This is a highly technical role and deep knowledge of Linux and networking is required, as well as a strong background in security. Resolving customer issues routinely includes working in complex product and infrastructure configurations, problem troubleshooting and isolation, performance tuning and optimization.

When not working with customers and analyzing the threats present within their networks, as an Analyst you are expected to research new security topics, engage in bug-hunts, and contribute to the community in a way that helps grow both your personal and company brands. As the voice of the customer, you will be an integral part of our success.

Your role at a glance

• Engage with enterprise customers as a Vectra product expert to support implementation of the Vectra solution at their sites.
• Assist customers with the integration of Vectra into existing ecosystem and tools
• Conduct health checks and architecture reviews, providing technical expertise and real-life experience in creating solutions, designs, and recommendations
• Identify blind spots in customer network security architecture and provide expert guidance on remediation
• Be a strong voice for your customers across business to identify new detection models, identify new product features, build content for both internal and external customer knowledge bases, and ensure that successful Vectra deployments.
• Drive high levels of customer satisfaction
• Provide training and guidance to customers in proper usage of the Vector platform.
• Analyze threats, piece-together exploitation trails, and study lateral movements of attackers within customer networks
• Expertly explain to customers your conclusions and recommendations for mitigating or remediating an in-progress attack
• Provide an attackers-eye-view to the evidence presented by the clients’ products and educate customers to the technical nature of the threat
• Pursue security research topics that contribute to the knowledge and enumeration of new threats
• Travel expected 20-30%

To be successful in your new role, you have

• Solid experience working in a technical customer-facing role or in an end user/customer environment
• Relevant professional security consulting experience
• Demonstrated experience in working with broad cross-functional teams
• Exceptional ability of presenting and explaining technology to people with less technical knowledge
• Excellent organizational, analytical, and writing skills
• Ability to work independently and adapt quickly

The technical essentials

• Good understanding of security product lines (firewalls, sandboxing, SIEM, forensics-type platforms)
• Understanding of network architectures including SPAN/mirroring configuration & network monitoring technologies (switching technologies)
• Understanding of network protocols such as TCP/IP, DHCP, DNS, NAT, VPN, PKI, RADIUS, etc.
• Good understanding of SQL and non-SQL databases
• Proficiency with packet capture tools, PCAPs, and their analysis
• Experience with EDR tools including Crowdstrike, Microsoft Defender for Endpoint (MDE) & SentinelOne

Experience that impresses us as a plus

• Experience with Active Directory, LDAP, VPN, firewalls, policy management, and LAN/WAN/Internet services administration
• Understanding of Cloud architecture for AWS and/or Azure; experience deploying in Cloud (AWS/Azure) architecture environments
• Scripting skills (preferably Python or Powershell) highly desired. Open source development a plus.
• Experience working with LLMs, prompt design & iteration