Staff Information Security Operations/Engineer

We’re looking for problem solvers, innovators, and dreamers who are searching for anything but business as usual. Like us, you’re a high performer who’s an expert at your craft, constantly challenging the status quo. You value inclusivity and want to join a culture that empowers you to show up as your authentic self. You know that success hinges on commitment, that our differences make us stronger, and that the finish line is always sweeter when the whole team crosses together.

As a Security Operations team member, you will be on the front line of protecting our products, infrastructure and applications. You will partner with internal stakeholders and all parts of the business to execute on security monitoring and response missions, drive through incident response lifecycles, influence positive changes throughout the organization on security postures, and manage and maintain state of art security technologies to protect the company assets and brand.

Primary Responsibilities:

• Ability to work shift to be able to fulfill 24/7 global security operations capabilities
• Triage and respond to security alerts and incidents in both on-prem and multi cloud environment for enterprise and product environments
• Participate in security incident response through in-depth and technical analysis on logs, malware, and network traffic, and perform forensics in case of breach
• Provide 24x7 on call assistance in responding to security incidents
• Design, implement, and maintain security controls and policies for cloud environments, including identity and access management, data protection, and network security
• Monitor cloud infrastructure and applications for security threats, vulnerabilities, and anomalies using security information and event management (SIEM) tools and other security monitoring technologies
• Support and manage security solutions to be up-to-date and provide maximum preventative and detective value
• Collaborate with internal stakeholders to develop security monitoring and detection use cases to drive risk reduction and operational effectiveness
• Provide guidance and training to other team members and stakeholders on cloud security best practices and procedures
• Support and participate in security automation program to enable security operations team to scale to handle growing workloads
• Support internal and external business partners in successful outcomes with respect to security requirements
• Stay up-to-date with the latest trends and developments in cloud security and incorporate new technologies and approaches as appropriate

Requirements:

• A minimum of 10+ years of experience in the Security Operations or equivalent is required.
• Bachelor’s degree in Computer Science or related field or equivalent experience/training, Master’s Degree in Computer Science a plus
• Proven prior experience and demonstrable recurring success in security operations or various security roles with experience across the technology stack
• Strong understanding of security incidents management lifecycle
• Strong experience in SIEM or log management platforms such as Azure Sentinel, Snowflake, Splunk, ELK, etc.
• Ability to analyze and understand system data including security event logs, system logs, application logs, and device logs from on prem and cloud environments
• Strong knowledge of cloud computing platforms (e.g., AWS, Azure, Google Cloud) and their security features
• Proficiency in using cloud-native security tools provided by cloud service providers (e.g., AWS Security Hub, Azure Security Center, Google Cloud Security Command Center) to monitor and manage security risks
• Strong skills in operating systems such as Windows, Linux and OS X, and corresponding forensics skills a plus
• Experience in scripting languages such as Python, Perl, Ruby, PowerShell or Shell script
• Experience with security tools and technologies such as firewalls, intrusion detection/prevention systems, encryption, and identity management solutions CISSP/CISM, SANS, CNSE (Palo Alto Networks), CCNP, CCIE, or other Networking and Security certifications a plus
• Excellent analytical and problem-solving skills
• Strong verbal and written communication skills, including ticket documentation, and incident reporting and escalations

Find yourself checking a lot of these boxes but doubting whether you should apply? At Alteryx, we support a growth mindset for our associates through all stages of their careers. If you meet some of the requirements and you share our values, we encourage you to apply. As part of our ongoing commitment to a diverse, equitable, and inclusive workplace, we’re invested in building teams with a wide variety of backgrounds, identities, and experiences.