IT Security Operations Analyst

Job Description

IT Security Operations Analyst

Position Summary :

Help us secure the Awesome Bus! We are looking for someone to join our global cybersecurity team. We are a highly effective team that works to protect and defend against intrusions into Trek’s systems.

The candidate must be self-motivated with in-depth technical IT skills and a clear understanding of how changes impact enterprise IT systems worldwide. The individual needs to have a solid understanding of how a variety of information technologies work and how to gather information on and troubleshoot them.

If you enjoy being a first responder to events and incidents; implementing, running, tuning, and troubleshooting platforms and tools; and continually improving your security skillset, this position will provide you with a unique and challenging opportunity to defend Trek against an increasingly sophisticated threat landscape. Travel is at a minimum but since this is a global company, some travel may be required.

Responsibilities :

Tuning, running, and improving technologies and configurations across all security domains to inform cyber risk decisions

Identifying events of interest and investigating them for signs of abuse or misuse

Relentlessly resolving security issues by gathering and analyzing event information and conducting root-cause analysis

Supplying technical guidance, leadership, and assistance to other teams

Creating, communicating, and maintaining incident documentation, reports, and playbooks

Orchestrating and automating work

Evangelizing information security within Trek worldwide

Other duties as assigned

Requirements :

At least five years’ experience in IT systems administration / engineering, network administration / engineering, and / or DevOps

At least two years’ experience in information security, including but not limited to incident response, vulnerability assessment, and alerting / monitoring

Strong understanding of cloud technologies up and down the stack

Strong understanding of Windows and

• nix systems as well as network architecture and protocols, including TCP / IP, DNS, and HTTPS.

Experience with anti-malware / XDR / advanced threat detection (Windows Defender, CrowdStrike Falcon, SentinelOne), network monitoring (Zscaler, Palo

Alto Networks, Cisco Meraki, Suricata

, Bro), identity service providers (Microsoft Entra ID), and log analysis tools (Splunk, Microsoft Sentinel, Graylog, ELK)

Ability to troubleshoot

Ability to communicate proficiently with technical and non-technical people around the world

Become SANS GIAC certified within six months or hold a current and valid certification in any of the following : (ISC)2 : CISSP, CCSP, SSCP, CAP; SANS GIAC : GCIH, GREM, GCIA, GCFA, GCFE, GPEN, GCED; CompTIA : Security+; EC Council : CEH; other IT certifications considered.

Preferred :

Experience using Splunk

Experience building solutions in Python, PowerShell, zsh, and bash

Bachelors' degree in Computer Science, Electrical / Computer Engineering, Information Security, Management Information Systems, or equivalent experience