Security Analyst with NDR Exp

The Analyst serves as a critical bridge, providing expert assistance, advanced deployment leadership, and proactive threat hunting capabilities.

In-Depth Investigation & Threat Hunting

• Conduct in-depth investigations and proactive threat hunting within the NDR platform, as well as other security solutions (EDR, SIEM, etc.).

Advanced D&I Execution

• Lead the enablement and operationalization phases by reviewing system descriptions, platform constraints, and operational designs (such as network communication ports and data flows).

Configuration & Onboarding

• Configure Arista NDR Nucleus and Sensors, identify/collect network settings, validate appliance cloud connectivity, and assist with configuring third-party integrations (EDR, orchestration, and ticketing systems).

Knowledge Transfer

• Deliver interactive, basic, and advanced knowledge transfer sessions to customers covering threat hunting, network forensics, incident response, and skill/adversarial model development.

Tier 1 Support & Oversight

• Support T1 analysts with complex cases, provide mentorship, and review/approve all High and Critical cases and tuning adjustments.

Case Load & Prioritization

• Closely monitor case queues, prioritizing Arista-related cases for timely resolution. Maintain situational awareness of overall case load and surge resources as needed.

Qualifications (General)

• Demonstrated experience in a Security Operations Center (SOC) environment, with a strong background in network forensics, threat intelligence, or large-scale security technology deployments.
• Familiarity with network communication ports, data flow design, SIEM logging configuration, backup/recovery best practices, and adversarial modeling language-based threat hunting.
• Ability to work effectively in a dynamic, fast-paced environment and manage phased project methodologies under varying customer timelines.
• Relevant certification (e.g., CompTIA Security+, CEH, GIAC certifications) is a plus.