Security Analyst with NDR Exp

Security Analyst

The Analyst serves as a critical bridge, providing expert assistance, advanced deployment leadership, and proactive threat hunting capabilities.

• In-Depth Investigation & Threat Hunting: Conduct in-depth investigations and proactive threat hunting within the NDR platform, as well as other security solutions (EDR, SIEM, etc.).
• Advanced D&I Execution: Lead the enablement and operationalization phases by reviewing system descriptions, platform constraints, and operational designs (such as network communication ports and data flows).
• Configuration & Onboarding: Configure Arista NDR Nucleus and Sensors, identify/collect network settings, validate appliance cloud connectivity, and assist with configuring third-party integrations (EDR, orchestration, and ticketing systems).
• Knowledge Transfer: Deliver interactive, basic, and advanced knowledge transfer sessions to customers covering threat hunting, network forensics, incident response, and skill/adversarial model development.
• Tier 1 Support & Oversight: Support T1 analysts with complex cases, provide mentorship, and review/approve all High and Critical cases and tuning adjustments.
• Case Load & Prioritization: Closely monitor case queues, prioritizing Arista-related cases for timely resolution. Maintain situational awareness of overall case load and surge resources as needed.

Qualifications (General)

• Experience: Demonstrated experience in a Security Operations Center (SOC) environment, with a strong background in network forensics, threat intelligence, or large-scale security technology deployments.
• Technical Skillset: Familiarity with network communication ports, data flow design, SIEM logging configuration, backup/recovery best practices, and adversarial modeling language-based threat hunting.
• Agility: Ability to work effectively in a dynamic, fast-paced environment and manage phased project methodologies under varying customer timelines.
• Certifications: Relevant certification (e.g., CompTIA Security+, CEH, GIAC certifications) is a plus.