Security Operations Analyst, Vimeo

• 3+ years of experience in security operations, incident response, or vulnerability management
• 2+ years of hands-on experience with EDR platforms (CrowdStrike)
• Strong understanding of security frameworks such as NIST, MITRE ATT&CK, and incident response methodologies
• Familiarity with SIEM platforms and log analysis techniques
• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent work experience
• Good communication and interpersonal skills

Desirable

• As a Security Operations Analyst III at Vimeo, you will engage in a variety of activities, either offensive, defensive, or some combination thereof, ultimately aimed at safeguarding our 300+ million users who entrust Vimeo with their content every day
• You’ll plan, carry out, and lead security initiatives to monitor and protect sensitive data and systems from infiltration and cyber-attacks
• You will likely collaborate frequently with and support developers, as well as members of the infrastructure security team, the compliance team, IT, Product, and other teams throughout the organization
• You love to solve puzzles, and are a great team player
• This role is on-call once a month
• Depending on your preferences and the current needs of the team, you may either focus on just some of the following areas, or you may choose to become involved with all of them
• You will act as the primary analyst for security incidents detected by EDR and other security monitoring solutions
• Analyze and triage security alerts, prioritizing based on severity, potential impact, and threat intelligence
• Conduct security assessments of our systems and infrastructure to identify vulnerabilities and risks, identify risk owners, and implement mitigating controls
• Implement and operate cloud security hardening and cloud security posture management across Google Cloud and AWS
• Collaborate with SRE, AppSec and Information technology around vulnerability management, detection, and response
• Automate security processes using scripting and other automation tools
• Collaboration with the compliance and privacy team — help ensure that our company complies with industry best practices and standards
• Help strengthen our own internal processes and procedures