Network Detection and Response (NDR) Specialist

Job Description

Who You’ll Work With

In this role as a Network Detection and Response (NDR) Specialist, you will work closely with Security Operations Center (SOC) analysts, threat hunters, incident response teams, network and infrastructure teams, and IT security leadership. You will also collaborate with cybersecurity architects, intelligence analysts, and tool administrators to ensure effective deployment, tuning, and integration of NDR platforms. Coordination with external vendors and platform providers (such as Vectra, Darktrace, or ExtraHop) may also be required for tool optimization and support. This role demands strong cross-functional engagement to enable rapid threat detection, investigation, response, and continuous improvement of the organization’s security posture.

What You’ll Do

Arista is seeking a skilled and proactive Network Detection and Response (NDR) Specialist to join our cybersecurity team. The ideal candidate will be responsible for monitoring, detecting, investigating, and responding to network-based threats using advanced NDR platforms. This role is crucial in strengthening our organization’s threat detection capabilities and reducing cyber risks in real time.

Key Responsibilities :

• Monitor network traffic to detect malicious or anomalous activity using NDR solutions (, Darktrace, Vectra, ExtraHop, Corelight).
• Configure, maintain, and fine-tune NDR tools to optimize detection capabilities and minimize false positives.
• Conduct deep-dive analysis of network events to identify indicators of compromise (IoCs) and tactics, techniques, and procedures (TTPs).
• Collaborate with SOC analysts, threat hunters, and other teams to contain and remediate threats.
• Perform forensic investigations of network packets and flows using tools such as Wireshark, Zeek, or Suricata.
• Develop detection rules, playbooks, and alerting mechanisms aligned with MITRE ATT&CK framework.
• Assist in threat intelligence enrichment and correlation with network-based alerts.
• Prepare root cause analyses, and recommendations for enhancing network security posture.
• Stay current on emerging threats, attack techniques, and NDR technologies.

Qualifications

Preferred Qualifications :

Additional Information

Arista stands out as an engineering-centric company. Our leadership, including founders and engineering managers, are all engineers who understand sound software engineering principles and the importance of doing things right.

We hire globally into our diverse team. At Arista, engineers have complete ownership of their projects. Our management structure is flat and streamlined, and software engineering is led by those who understand it best. We prioritize the development and utilization of test automation tools.

Our engineers have access to every part of the company, providing opportunities to work across various domains. Arista is headquartered in Santa Clara, California, with development offices in Australia, Canada, India, Ireland, and the US. We consider all our R&D centers equal in stature.

Join us to shape the future of networking and be part of a culture that values invention, quality, respect, and fun.