Security Analyst
Saint Louis, Missouri, United States
Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security.
Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, San Francisco, Seattle, Bangalore, London, Melbourne, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events (pre and hopefully post-Covid) and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive. Visit us at Netskope Careers and follow us on Twitter @Netskope and Facebook.
Security Analyst
Cyber Security is a big deal. It’s in the news, growing rapidly, a critical tool for every company, and our specialty.
About the position:
Netskope is looking for an analyst on the Threat and Vulnerability Management team. This position will focus on the identification and proactive mitigation of Netskope’s attack surface, threat landscape, security gaps , and cyber threats which could impact the business. In addition, this role will be responsible for performing the vulnerability management function such as finding, reporting, and supporting business units in their vulnerability remediation efforts.
Responsibilities:
-
Continuous development and execution of the enterprise Threat and Vulnerability Management strategic plan to identify and reduce vulnerable attack surfaces
-
Perform complex analysis to understand emerging threats, and continuously demonstrates awareness of current threat posture
-
Reviews emerging and existing threat methodologies and exploit code / proof of concept code to develop mitigations, prioritize risks and navigating sources for identification of vulnerable assets.
-
Execute on core team functions such as scanning, reporting, custom checks, asset tagging, as well as incorporating threat intelligence into vulnerability checks
-
Automate security tasks using scripting languages such as python.
-
Maintain and contribute to the threat models understanding emerging/existing threats and countermeasures to them.
-
Partners with internal teams to lead, develop, test, and continuously validate detection signatures for various attacks
-
Provide internal teams with hardening guidance and develop tooling for auditing
-
Support teams by being a Remediation Champion giving them guidance on various strategies to remediate a vulnerability and supporting them in their testing and validation efforts.
-
Provides expertise in incident response activities.
-
Teach and understand CVSS, CVE, and additional vulnerability ratings and methodologies
Experience:
-
Experience 1 to 3 Yrs in Security
-
Should possess relevant university degree and/or professional qualifications/certification (e.g. CEH, OSCP)
-
Must have knowledge with tools Tenable, Qualys, NMAP, SCAPY, and other tools.
-
Must have the ability to understand hardening guidelines for new technologies and applications being adopted by Netskope.
-
Understanding of containerization and containerized applications, their security weaknesses and how to secure them
-
Must have an understanding of patch automation, security orchestration, and management tooling for on premise, private cloud, and cloud infrastructure.
-
Knowledge of OWASP Web and Mobile Top 10 vulnerabilities and identifying them.
-
Knowledge of TCP/IP and other application and network level protocols.
-
Knowledge of Cloud Applications like AWS, Azure and other SAAS Applications
-
Excellent written and verbal communication skills.
-
Self-motivated, curious, knowledgeable pertaining to news and current events.
-
Ability to be effective in a remote global work environment
#LI-TS1
Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope's Privacy Policy for more details.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Audits Automation AWS Azure CEH Cloud CVSS Exploit Incident response Nmap OSCP OWASP Privacy Python Qualys SaaS Scripting TCP/IP Threat intelligence Vulnerabilities Vulnerability management
Perks/benefits: Team events Transparency
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Ethical hacker / Pentester H/F jobs
- Open Information Security Specialist jobs
- Open Manager Pentest H/F jobs
- Open Cyber Security Architect jobs
- Open Senior Cyber Security Engineer jobs
- Open Cyber Security Specialist jobs
- Open Product Security Engineer jobs
- Open Principal Security Engineer jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Staff Security Engineer jobs
- Open Senior Information Security Analyst jobs
- Open Cybersecurity Analyst jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open Chief Information Security Officer jobs
- Open IT Security Analyst jobs
- Open Consultant SOC / CERT H/F jobs
- Open Cybersecurity Consultant jobs
- Open Security Specialist jobs
- Open Senior Information Security Engineer jobs
- Open Cybersecurity Specialist jobs
- Open Senior Security Architect jobs
- Open Senior Penetration Tester jobs
- Open Security Researcher jobs
- Open Sr. Security Engineer jobs
- Open Security Operations Analyst jobs
- Open Clearance-related jobs
- Open ISO 27001-related jobs
- Open Windows-related jobs
- Open Application security-related jobs
- Open Network security-related jobs
- Open Agile-related jobs
- Open Pentesting-related jobs
- Open Vulnerability management-related jobs
- Open GCP-related jobs
- Open Analytics-related jobs
- Open SaaS-related jobs
- Open CISA-related jobs
- Open IAM-related jobs
- Open Threat intelligence-related jobs
- Open APIs-related jobs
- Open Security assessment-related jobs
- Open Java-related jobs
- Open IDS-related jobs
- Open DevOps-related jobs
- Open Security Clearance-related jobs
- Open Malware-related jobs
- Open EDR-related jobs
- Open Kubernetes-related jobs
- Open CEH-related jobs
- Open IPS-related jobs