Overview
We are seeking skilled and motivated security analysts to join the Arista Managed Network Detection and Response (MNDR) team. The successful candidate(s) will play a critical role in our 24/7 security operations, leveraging a suite of security tools including our core NDR platform, to protect customer environments.
Additionally, this candidate(s) will support the Deployment and Integration (D&I) Services Team, helping customers optimize their security posture, plan configurations, and operationalize Arista's NDR solution.
Key Responsibilities
- Case Management: Efficiently manage and document security cases within Arista s ticketing systems.
- D&I Collaboration: Participate in project kickoff phases to review pre-engagement checklists, project goals, milestones, and unique customer environment information.
- Continuous Improvement: Contribute to the continuous improvement of security operations processes, platform tuning, and technical skills.
- Team Collaboration: Maintain open communication and collaboration with other security team members.
Security Analyst
The Analyst serves as a critical bridge, providing expert assistance, advanced deployment leadership, and proactive threat hunting capabilities.
- In-Depth Investigation & Threat Hunting: Conduct in-depth investigations and proactive threat hunting within the NDR platform, as well as other security solutions (EDR, SIEM, etc.).
- Advanced D&I Execution: Lead the enablement and operationalization phases by reviewing system descriptions, platform constraints, and operational designs (such as network communication ports and data flows).
- Configuration & Onboarding: Configure Arista NDR Nucleus and Sensors, identify/collect network settings, validate appliance cloud connectivity, and assist with configuring third-party integrations (EDR, orchestration, and ticketing systems).
- Knowledge Transfer: Deliver interactive, basic, and advanced knowledge transfer sessions to customers covering threat hunting, network forensics, incident response, and skill/adversarial model development.
- Tier 1 Support & Oversight: Support T1 analysts with complex cases, provide mentorship, and review/approve all High and Critical cases and tuning adjustments.
- Case Load & Prioritization: Closely monitor case queues, prioritizing Arista-related cases for timely resolution. Maintain situational awareness of overall case load and surge resources as needed.
Qualifications (General)
- Experience: Demonstrated experience in a Security Operations Center (SOC) environment, with a strong background in network forensics, threat intelligence, or large-scale security technology deployments.
- Technical Skillset: Familiarity with network communication ports, data flow design, SIEM logging configuration, backup/recovery best practices, and adversarial modeling language-based threat hunting.
- Agility: Ability to work effectively in a dynamic, fast-paced environment and manage phased project methodologies under varying customer timelines.
- Certifications: Relevant certification (e.g., CompTIA Security+, CEH, GIAC certifications) is a plus.
