Security Engineering Analyst, Weights & Biases

• We are seeking a dedicated and skilled Security Analyst to help safeguard our data, applications, and infrastructure from security threats
• The ideal candidate will have hands-on experience in security operations, incident response, and vulnerability management
• We are particularly looking for individuals with a solid technical foundation, proactive problem-solving skills, and a commitment to continuously improving our security landscape
• Educational Background:Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or a related technical field
• Experience:2+ years of experience in a security analyst, security operations center (SOC), or penetration testing role.Experience with security tools such as SIEM, IDS/IPS, EDR, and firewalls
• Strong understanding of network protocols, operating systems (Linux, Windows), and cloud security (AWS, GCP, Azure)
• Technical Skills:Proficiency with tools like Burp Suite, Nessus, Wireshark, Metasploit, and other security assessment tools.Familiarity with scripting or programming languages (Python, Bash, etc.) for automating tasks or writing custom tools
• Knowledge of cloud security and DevOps practices, particularly securing Kubernetes and Docker environments

Desirable

• As a Security Analyst at W&B, you will be responsible for detecting vulnerabilities, responding to security incidents, and maintaining a strong security posture across our systems
• Monitor and Respond to Security Incidents:Continuously monitor alerts, logs, and network activity using security tools. Analyze security incidents, investigate breaches, and perform root cause analysis to mitigate risks
• Vulnerability Assessment and Remediation:Regularly perform vulnerability assessments using tools like Nessus, Burp Suite, or custom scripts. Prioritize and remediate vulnerabilities in collaboration with the DevOps and infrastructure teams
• Threat Hunting and Incident Response:Proactively identify potential security risks and anomalies through threat hunting. Lead or assist in security incident investigations, including forensic analysis and reporting
• Manage Security Tools and Infrastructure:Deploy, configure, and optimize security tools (firewalls, SIEM, EDR). Ensure tools are effectively tuned to detect and prevent threats without overwhelming false positives
• Collaborate with Development and Infrastructure Teams:Work closely with our development teams to implement secure coding practices, ensuring that applications and services are secure from the ground up (DevSecOps)
• Security Auditing and Compliance:Support security audits and ensure compliance with relevant standards and frameworks. Document security incidents, policies, and procedures for both internal use and external audits
• Security Awareness Training:Develop and conduct security training programs for employees to improve awareness of common threats like phishing, social engineering, and best security practices
• Cloud and Container Security:Apply best practices for securing cloud infrastructure (AWS, GCP) and containerized environments (Kubernetes, Docker). Ensure the correct configuration and security of cloud resources