Security Operations Analyst, Sprout Social

• If you are fluent in risk identification and mitigation and stay up to date on the latest security threats and trends in our industry, we’d love to talk with you!
• 2+ years of information security experience
• Experience in security monitoring, incident response and/or vulnerability management
• Understanding of computer networking and systems (compute, storage, OS -- especially Linux) and their interactions

Desirable

• Security sits at the intersection of empowering teams to move quickly and mitigating risks to our overall business
• We are enablers who strive to hone our unique craft and minimize friction or red tape
• As a part of this team, you are given the space and encouraged to stretch beyond your core function, and make a deeper impact on the broader organization
• In short, the work you do here matters, and you feel that day in and day out
• As a security analyst at Sprout, we’re looking for someone who knows more than how to run a scanning tool: you’ll leverage your knowledge of distributed systems to work and collaborate with engineers and IT staff to increase the protective, monitoring, reporting and mitigation capabilities of the Security team
• As a cloud native company, you'll be involved in securing our cloud environments and working with SaaS-based tooling
• Develop and maintain rules for alerts generated from both our cloud native product and employee platforms
• Triage and investigate security alerts reported through SEIM platform with IT, solution engineering and security teams
• Identify additional log sources and alerting rules
• Guide, support and provide analysis during and after security events following the incident response playbooks
• Integrate with a maturing vulnerability management program to ensure tracking and remediation of security issues
• Monitor vulnerability sources for infrastructure and application vulnerabilities
• Develop, maintain, and automate reporting to prioritize vulnerabilities for IT and solution engineering teams which drives remediation efforts
• Collaborate with partners in infrastructure and engineering to measurably harden, monitor, and ensure resilience for our cloud-hosted platforms and software development lifecycle
• Use both automated and manual testing tools to find and validate vulnerabilities in infrastructure
• Evolve the security posture by continuously assessing and improving the toolset managed by the security team
• Participate in a security on-call schedule
• Within 1 month, you will:
• Experience Sprout’s in-depth onboarding, covering everything from our company mission and values, hearing directly from executives and founders, to deep training on our products and the value that Sprout delivers to our customers
• Make a plan with your manager to set initial priorities, align on expectations for your role, plant goalposts for your career, and learn about Sprout’s approach to security
• Be introduced to Sprout’s security stakeholders across the organization
• Learn our existing tooling and begin monitoring the status of our environments
• Collaborate regularly with teammates and members of our infrastructure and development teams and get up to speed on our current and future initiatives
• Get regular team feedback on your approach to managing and engaging our existing risks and security capabilities
• Within 3 months, you will:
• Work with your manager and teammates to create and prioritize quarterly team goals
• Begin to deconstruct larger security projects into smaller, more manageable deliverables
• Start to understand the breadth and depth of technologies and tools under the team’s purview
• Review, refine and triage alerts triggered from our IDS, vulnerability management tools,and other monitoring platforms
• Participate in Security on-call rotation
• Build connections with members from other teams through active networking and community building to help foster a security-first culture
• Within 6 months, you will:
• Improve the security tooling and telemetry used at Sprout
• Identify security gaps within our systems, present plans to mitigate risks, and work with teams to get them prioritized within their workstreams
• Generate and improve upon internal and external security policies and standards
• Help drive internal security awareness training and phishing programs
• Regularly evaluate and report security health and recommendations
• Have your first performance conversation with your manager, where you’ll discuss your accomplishments in your role and work together to build goals for your professional growth
• Partner with engineering, IT and other teams to continuously improve our ability to deliver reliable and secure services
• Within 12 months, you will:
• Be a go-to expert and security representative within Sprout
• Help define and build the security roadmap for future work
• Work and effectively communicate with other groups across the organization to ensure big-picture alignment and encourage cross-team collaboration
• Own cross-organizational projects, demonstrating project management skills, consensus building, and strong leadership
• Have opportunities to contribute to in-house technical presentations, employee onboarding, and workshops that share your expertise with large groups of Sprout employees
• Surprise us! Use your unique ideas and abilities to change Sprout Security in beneficial ways that we haven’t considered yet
• Of course what is outlined above is the ideal timeline, but things may shift based on business needs and other projects and tasks could be added at the discretion of your manager