Security Operations Center Analyst

4 weeks ago

Austin TX United States Cloudflare Full time
About Us

At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.

We realize people do not fit into neat boxes. We are looking for curious and empathetic individuals who are committed to developing themselves and learning new skills, and we are ready to help you do that. We cannot complete our mission without building a diverse and inclusive team. We hire the best people based on an evaluation of their potential and support them throughout their time at Cloudflare. Come join us

Job Locations: Remote, Mexico City, MX

To the attention of candidates (Mexico City):

This role requires full time work over the Weekends. Candidates should be comfortable working with a “Wed-Sun” or “Sat-Wed” 5-day working week schedule. Candidates MUST have right-to-work in Mexico. Visa sponsorship is NOT provided for this position.

About The Department

The Cloudflare Customer Support Team solves complicated problems and answers technical questions via phone, email, chat and social media. Whether it is a Wordpress blogger using our services for free or a global Enterprise business with petabytes of web traffic, we are always eager to assist. We are the eyes and ears of Cloudflare, acting as the real-time voice of the customer to help communicate their needs and real-world use cases back to the rest of the company - for better service and future product development.

Description

Security Operations Center Analysts provide premium-level support for Cloudflare’s security products and features. Our largest and most technically sophisticated customers will contact the SOC as a Service team for assistance and intelligence in dealing with threats or attacks on their infrastructure at OSI Layers 3, 4, and 7. This will span the range of Cloudflare security products from Magic Transit Infrastructure Protection, DDoS mitigation and Network Firewall, to using the Web Application firewall (WAF), Spectrum, Bot Management and Rate Limiting to help customers.

Security Operations Center Analysts analyze threats, make detailed and informed suggestions for mitigation and may need to implement mitigation strategies directly on behalf of the customer. The team also provides attack reporting beyond Cloudflare’s self-service reports.

Responsibilities

  • Monitor and investigate the alerts to identify attacks
  • Work with Engineering and Operations teams to mitigate attacks, suggest steps to mitigate, and apply the appropriate mitigation, when applicable
  • Work with Engineering and Product teams to improve the products and tools
  • Extensive communications with customers via chat, email, and phone
  • Review the latest alerts to determine relevancy and urgency. Create new tracking tickets for alerts that signal an incident and require review or escalation
  • Configure / Manage security monitoring rules and contribute to tool improvements
  • Compare traffic signatures and attributes including IP addresses, cookie variations, HTTP headers, and JavaScript footprints to determine what is good traffic and what is malicious
  • Participation in a weekend and holiday rotation required with main working hours 9 to 5 Pacific time

Key skill sets

  • Strong understanding of the OSI model, TCP, UDP, BGP, QUIC
  • Advanced understanding of iptables
  • Analysis of traffic for attack anomaly detection and creation of mitigation rules
  • Experience in handling attack mitigation and thorough knowledge of various attacks (L3/4 and L7)
  • At least 2 years of technical support experience and customer support experience is a must
  • Strong communication skills with high-value customers
  • Command line / Bash shell
  • Sysadmin skills (Linux/Mac/Windows) & Programming skills (Python, Ruby, PHP, C, C#, Java, Perl, Git etc.)
  • Security skills and certifications preferred: CISSP, GCIA GCIH, GCFA, GCFE, etc.

Bonus Points:

  • Previous DDoS mitigation for OSI layers 3,4, & 7, filter malicious traffic using Cloudflare tools like Magic Transit, Network Firewall, WAF, IP reputation lists, packet inspection, blacklisting, whitelisting, and/or rate limiting is a plus

What Makes Cloudflare Special?

We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.

Project GalileoWe equip politically and artistically important organizations and journalists with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.

Athenian ProjectWe created Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration.

1.1.1.1We released
1.1.1.1 to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our privacy commitment and ensure that no user data is sold to advertisers or used to target consumers.

Sound like something you’d like to be a part of? We’d love to hear from you

This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.

Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer.

Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.

  • Security Operations Center Analyst

    1 month ago

    Atlanta, GA, United States TekStream Solutions Full time

    Security Operations Center (SOC) Analysts I and IILocation: RemoteTekStream is currently looking for several Level I and Level II Security Analysts whose primary day-to-day duties involve reviewing alerts from Splunk SIEM and/or SOAR products and investigating suspected security incidents in a Managed Services SOC. These contract positions would be part-time...

  • Security Operations Center Analyst

    1 month ago

    Melbourne, FL, United States Insight Global Full time

    MUST BE ABLE TO OBTAIN A PUBLIC TRUST SECURITY CLEARANCE FOR THIS ROLE!Required Skills & ExperienceBachelor's degree in IT or related field, and minimum 2 years related experience2 years' experience in the Information Security field specifically offensive security and incident response.Ability to obtain a Public TrustAbility to support on call schedule...

  • Security Operations Center Analyst

    1 month ago

    Reston, VA, United States Eviden Full time

    Security Analyst - MDR (SOC)Experience Range: 2-3 years of relevant experience in cyber security.Required Qualifications:Strong analytical and technical skills in computer network defense operationsIncident response Handling (Detection, Analysis, Triage, Recommendations)Performing advance investigation of security incidents (reported by L1 & L2 Analyst)...

  • Senior Security Intelligence Operations Center Analyst

    1 month ago

    Houston, TX, United States CEVA Logistics Full time

    YOUR ROLE The Senior Security Intelligence Operations Center Analyst works in a 24/7/365 Security Intelligence Operations Center directing the development of tactical and strategic security and intelligence products to inform protection and risk mitigation efforts in support of CEVA assets, operations, and people. Monitors global events, provides...

  • Security Intelligence Operations Center Analyst

    4 weeks ago

    Houston, TX, United States CEVA Logistics Full time

    YOUR ROLEThe Security Intelligence Operations Center (SIOC) Analyst supports CEVA Security Leadership and other assigned functions. The SIOC Analyst will monitor global events and assess and communicate impact or potential impact to organizational stakeholders. This role executes the various core functions of the SIOC to include, but not limited to incident...

  • Security Intelligence Operations Center Analyst

    1 month ago

    Houston, TX, United States CEVA Logistics Full time

    YOUR ROLEThe Security Intelligence Operations Center (SIOC) Analyst supports CEVA Security Leadership and other assigned functions. The SIOC Analyst will monitor global events and assess and communicate impact or potential impact to organizational stakeholders. This role executes the various core functions of the SIOC to include, but not limited to incident...

  • Security Operations Center Analyst

    1 month ago

    Herndon, VA, United States TCI Technology Consulting Inc Full time

    TCI has an immediate need for a SOC Analyst in Herndon, VA. This is a long-term contract opportunity with the possibility of hire.SUMMARYThe SOC Analyst will be responsible for analyzing and/or administering security controls for information systems.RESPONSIBILITIESSafeguard the network against unauthorized infiltration, modification, destruction or...

  • Security Operations Center Analyst

    3 months ago

    Austin, United States Cloudflare Full time

    About UsAt Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without...

  • Security Operations Center Analyst

    1 month ago

    austin, United States Cloudflare Full time

    About UsAt Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without...

  • Security Operations Center Analyst

    2 weeks ago

    Austin, United States Duff & Phelps Full time

    Krolls Cyber Risk team works on over 2,000 cases a year, including some of the most complex and highest profile matters in the world. With experts based around the world, supported by ground-breaking technology, we help protect our clients data, people, operations and reputation with innovative assessments, investigations and intelligence. We are the only...

  • Security Operations Center

    2 months ago

    Austin, United States Unreal Gigs Full time

    Introduction: Do you thrive on being the first line of defense against cyber threats? Are you passionate about monitoring, detecting, and responding to security incidents in real-time? If you're a detail-oriented professional who loves investigating and stopping cyberattacks, then our client has the perfect opportunity for you. We're looking for a Security...

  • Security Operations Center Analyst

    6 days ago

    San Francisco, CA, United States Cloudflare, Inc. Full time

    About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world's largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without...

  • Security Operations Analyst

    4 weeks ago

    La Verne, CA, United States CAI Full time

    Job ID NumberR4225Employment TypeFull timeWorksite FlexibilityOnsiteJob SummaryAs a Security Operations Center (SOC) Analyst, you will monitor our client's environment for cyberthreats. This is a 3rd shift position, Monday - Friday, 10pm - 6am.Job DescriptionWe are seeking a Security Operations Center (SOC) Analyst. This is an onsite position in La Verne, CA...

  • Security Operations Center Officer

    3 months ago

    Austin, United States Inter-Con Security Full time

    Job Details Job Location Austin (10234) - Austin, TX Position Type Full Time   Salary Range $20.00 Hourly Job Category Field Description Company Overview: Founded in 1973, Inter-Con Security Systems, Inc. is a leading US-owned security company, providing integrated security solutions to government and commercial customers on four continents. Inter-Con...

  • Global Security Operations Center Analyst

    1 month ago

    Scottsdale, AZ, United States Sibylline Ltd Full time

    Company DescriptionAbout SibyllineSibylline is a leading intelligence and strategic risk consultancy in the security sector. Since 2010 we have supported businesses, governments and NGOs through the provision of high-quality risk analysis, due diligence and consultancy services. The firm provides an innovative, entrepreneurial and fast-growing working...

  • Computer Systems Analyst I

    1 month ago

    united states RIVET OPERATIONS COMPANY LLC Full time

    Work Location: Guam (Navy Base) Computer Systems Analyst I - GIS Analyst Salary Range: $40.00hr - $43.00hr Job Summary: The Computer Systems Analyst I will support Telecommunication Operational Support and Sustainment (TOSS) services for Naval Computer and Telecommunications Station (NCTS) Guam, Base Communications Office (BCO) in Guam. Network Operations...

  • Sr. Security Analyst

    4 weeks ago

    Spring, TX, United States INSPYR Solutions Full time

    Title: Sr. Security Analyst Make your application after reading the following skill and qualification requirements for this position. Location: Spring, TX (Hybrid - 3 days onsite in 77389) Duration: Contract (Long-Term, potential to convert) Work Requirements: US Citizen, GC Holders or Authorized to Work in the US Key Points: This position is hybrid in...

  • SCA - Computer Systems Analyst GU

    1 month ago

    united states RIVET OPERATIONS COMPANY LLC Full time

    Job Title: SCA - Computer Systems Analyst I Location: Dededo, Guam Salary Range: $28.50hr - $30.00hr Rivet Operations Company has an opening for a Computer Systems Analyst to join our growing team in Dededo, Guam. Rivet Operations Company ("Rivet") is a leader in physical and cyber security, scientific research, development, and facilities management. JOB...

  • Cyber Security Analyst

    1 month ago

    Pittsburgh, PA, United States Brooksource Full time

    Jr. Cyber Security Operations AnalystPittsburgh, PA (hybrid)The Cybersecurity Operations Analyst Associate works with the team to review security events to identify and prioritize potential threats and identify trends utilizing various tools and technologies. You will work closely with other teams within Cybersecurity and with IT Operations. This is an entry...

  • Engineer, Security Operations Center

    6 days ago

    Washington, DC, United States White & Case LLP Full time

    Job Description - Engineer, Security Operations Center (240000VD) Firm Summary White & Case is an elite global law firm serving leading companies, financial institutions and governments worldwide. Our long history as an international firm means we are perfectly placed to help our clients resolve their most complex legal challenges wherever they may be. With...