Senior Cyber Operations Analyst

at  Juul Labs

THE COMPANY:

Juul Labs’ mission is to impact the lives of the world’s one billion adult smokers by eliminating combustible cigarettes. We have the opportunity to address one of the world’s most intractable challenges through a commitment to exceptional quality, research, design, and innovation. Backed by leading technology investors, we are committed to the same excellence when it comes to hiring great talent.
We are a diverse team that is united by this common purpose and we are hiring the world’s best engineers, scientists, designers, product managers, operations experts, and customer service and business professionals. If the opportunity to build your career at one of the fastest growing companies is compelling, read on for more details.

PERSONAL AND PROFESSIONAL QUALIFICATIONS:

• Advanced knowledge of endpoint protection technologies such as Carbon Black or CrowdStrike
• Advanced understanding of malware detection and response protocols
• Familiarity with the MITRE att&ck framework
• Advanced understanding of system behavior in multi-cloud environments
• Proficient in network telemetry-based investigations
• Proficient in Enterprise Logging platforms such as Splunk Cloud and Splunk ES.
• 5+ years of experience as an incident responder
• OSCP, GREM, Sec+, CISSP or similar industry standard certifications
• Familiar with Python, C++, JavaScript, Ruby or other scripting languages

EDUCATION:

• Bachelor’s in computer science or other technology adjacent field
• Studies in cyber security
• CISSP or similar certifications

• Proficiently operate and configure endpoint protection technology platforms
• Investigate malicious behavior on endpoints leveraging industry standard platforms
• Respond to escalated alerts, during and after business hours
• Serve as Security Engineer supporting Splunk Cloud and Splunk ES
• Conduct custom security log correlation searches, alerts, reports and dashboard content for Security monitoring teams
• Participate in vulnerability remediation efforts on user and server endpoints
• Produce metrics on alerting remediation efforts across the environment
• Respond to on-call alerts within required SLA’s
• Effectively assist in the deployment and management of endpoint protection technologies
• Assist in the deployment of function adjacent endpoint security technologies
• Provide expertise and capability augmentation within the cyber security team