Web Application Security Analyst, Fastly

• Strong interest in infosec and application security
• Working knowledge of core internet technologies like DNS, HTTP & TLS
• An understanding of the OSI model and are able to explain potential exploit methods at each layer
• Experience in any IT or security operations, technical support, or research related role
• Proven ability to deliver exceptional customer experiences
• Desire to contribute to the processes and policies that scale our organization as we grow
• Assist with the maintenance of existing runbooks and identifying when a new one should be created
• Desire to work and learn on one's own initiative but in a supportive team environment
• Experience troubleshooting WAF products
• Fluency in English (both spoken and written) required and you know how to adapt content for different audiences
• Connecting with clients to address concerns or escalations; track and drive to closure any issues that impact the service and its value to clients
• Focused on delivering exceptional customer experiences
• Scripting ability in a popular coding languages
• Kubernetes/ Terraform knowledge/ experience

Desirable

• Leveraging our growing security product suite, a Web Security Application Analyst contributes real world security insights to Fastly and our customers as we address Internet-scale threats. Cloud security solutions enable our customers to benefit from extra visibility across the world and expertise from a central team
• The Customer Security Operations Center (CSOC) team provides operational support for Fastly’s security products and services. Analysts within this team focus on delivering outstanding security services to our customers
• The team works with the security, operations and customer organizations internally to respond to security threats faced on the Internet today
• You will be responsible for monitoring and analyzing customer activity, like identifying account-takeover, bot attacks, DDoS attacks and other malicious web traffic
• The focus will be around attacks at the application layer. You will have the opportunity to work on some of the world’s most scalable distributed systems that handle around 25 million requests per second, as well as the world-class engineers who developed these systems
• Provide an outstanding response to customer security issues and support
• Provide an excellent customer experience
• Analyze web traffic and identify suspicious activity
• Triaging and responding to incoming tickets and proactively detected alerts
• Write, contribute to, and review security reports
• Manage security configurations for our customers
• New alert creations
• New attack mitigations
• Modification of existing controls
• Respond to tickets and alerts in accordance with established Service Level Agreements (SLAs)
• Contribute to the processes and policies that scale our organization as we grow
• This position will require you to be available during core business hours, 9am to 6pm Tuesday to Saturday