Job Description

Who You'll Work With

You will join our Operational Security team, a group of dedicated professionals who serve as our organization's initial line of defense. In this collaborative environment, you will work closely with senior analysts to monitor security alerts across our enterprise telemetry, investigate potential threats, and support critical incident response efforts. Our team thrives on shared expertise and hands-on experience with diverse technologies to protect our infrastructure.

What You'll Do

• Monitor security alerts from various telemetry sources (SIEM, IDS/IPS, EDR) and escalate anomalies as necessary.
• Conduct initial triage, analysis, and classification of security incidents.
• Document investigative findings and assist in comprehensive incident response.
• Follow established incident response procedures and escalate to senior analysts when required.
• Gather threat intelligence to proactively enhance security monitoring capabilities.
• Create, maintain, and review internal documentation for processes and procedures.
• Implement cloud security reference architectures and guardrails rooted in Zero Trust and Least Privilege principles.
• Support vulnerability management by identifying potential security weaknesses across the enterprise.
• Conduct investigations and provide necessary triage, containment, and forensic support during cloud-based security incidents.
• Stay informed on emerging threats, vulnerabilities, and cybersecurity trends.
• Collaborate with cross-functional teams to ensure timely resolution of security incidents, providing guidance and recommendations.
• Participate in project work, including proof-of-concepts (PoCs) for new tools and optimizations of existing technologies.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or a related technical field (or equivalent practical experience).
• A minimum of 5 years of progressive experience within Information Security, specifically including 2 or more years dedicated to Cloud security initiatives.
• Strong foundational understanding of both macOS and Windows environments.
• Technical Skills:
• Familiarity with SIEM tools, logging platforms, firewalls, antivirus, and EDR solutions.
• Core understanding of network protocols (TCP/IP, DNS) and security architecture.
• Basic scripting knowledge (Python, PowerShell, or Bash) is a plus.
• Experience with SIEM & SOAR administration is desirable but not essential.
• Demonstrated proficiency with a minimum of two major public cloud platforms (GCP and Azure preferred; AWS and OCI are advantageous).
• Professional Skills: Strong analytical problem-solving abilities, excellent communication skills, and the ability to thrive in a fast-paced environment.
• Preferred Certifications: CompTIA Security+, CySA+, BTL1, or Cloud Security certifications.
• Local/Regional candidates only.
• Local to area with a Flexible hybrid working arrangement

Additional Information

Compensation Information:

The new hire base pay for this role has a salary range of $103,000 to $154,000.

Arista offers different pay ranges based on work location, so that we can offer consistent and competitive pay appropriate to the market. The actual base pay offered will be based on a wide range of factors, including skills, qualifications, relevant experience, and work location. The pay range provided reflects base pay only and in addition certain roles may also be eligible for discretionary Arista bonuses and equity. Employees in Sales roles are eligible to participate in Arista's Sales Incentive Plan, which pays commissions calculated as a percentage of eligible sales. US-based employees are also entitled to benefits including medical, dental, vision, wellbeing, tax savings and income protection. The recruiting team can share more details during the hiring process specific to the role and location