Cybersecurity Incident Response Analyst, Sonos

• 5+ years of related experience in a cybersecurity-focused role
• Professional work experience in a technology field where you solved complex problems through influence and strong organizational skills
• Demonstrated experience in computer related security topics, such as: software vulnerabilities and exploitation, host forensics, network traffic analysis, blue teaming, security operations, and cloud security
• Experience with cyber security incidents of different types, including malware compromise, adversary investigations, malicious insider, web application attacks, and data breaches
• Experience in leading incidents or projects through the entire lifecycle while maintaining strong situational awareness and communication with direct stakeholders

Desirable

• At Sonos we want to create the ultimate listening experience for our customers and know that it starts by listening to each other. As part of the Sonos team, you’ll collaborate with people of all styles, skill sets, and backgrounds to realize our vision while fostering a community where everyone feels included and empowered to do the best work of their lives
• The Cybersecurity Incident Response Analyst will have a key role in cybersecurity incident response by ensuring rapid and effective response to security threats that affect Sonos’ systems, services, or products
• In doing so, you will be helping to protect customers and enable Sonos to continue to deliver delightful sound experiences to our customers worldwide
• Building the world’s leading sound experience starts with the experience we provide for our people. That’s why we’ve been distributed from the start: initially between offices in Boston & Santa Barbara, and now with additional offices around the globe
• This role can be done from any of our offices across the United States or remotely from home. It’s about impact, not location
• Perform detailed investigations and analysis of security-related findings
• Perform computer forensic investigations
• Act as incident commander and drive security incidents to closure, coordinating task forces made up of various teams across the organization to ensure comprehensive mitigation
• Communicate and document incident response activities in an authoritative and actionable manner
• Perform root cause analysis, lessons learned activities, and create action plans that will prevent or mitigate against future incidents
• Participate in Cyber Threat Intelligence (gather and operationalize data, including hunt activities) to enhance detection and response strategies
• Develop and continuously improve playbooks, processes and monitoring use cases
• Collaborate with cross-functional teams to mitigate risks and improve incident response processes
• Automate incident response activities using scripting or other programming skills
• Participate in on-call rotation