Senior Security Analyst, HeartFlow

• We are looking for an investigator that loves the challenge of analyzing complex security telemetry to uncover hidden threats and ensure a resilient defense for our corporate and product environments
• Education - BS in Computer Science or a related technical degree. No degree? No problem—if you have the equivalent experience and certifications, we want to hear from you
• Experience - At least 2 years in the trenches of a SOC or Incident Response team. However, if you haven't held a formal "Security" title but have at least 2 years on an IT Operations team, we value deep technical expertise in operating systems and networking if you can show us your passion for security
• You’re comfortable navigating security platforms like SIEMs, EDR tools (CrowdStrike or similar), and Email Security platforms
• Strong problem-solving skills with the ability to troubleshoot security issues across networks, operating systems, and applications
• Possess a solid understanding of log correlation and how to write logic for security alerts
• Deep understanding of at least one of the operating system internals (Windows, Linux, or macOS). Ability to analyze process trees
• Able to analyze network flows and packet data to find hidden threats. You know your way around network tools and can spot anomalies across different types of environments

Desirable

• The Heartflow Information Security team is responsible for security across our corporate and product environments, protecting our patient data and medical device ecosystem
• The initial focus will be on triaging advanced security events and participating in our security incident response process
• Analytical work will span our corporate, clinical and cloud infrastructure and will include threat hunting and the refinement of high-fidelity detection logic
• Perform in-depth analysis of security events, logs, and network traffic using SIEM, EDR, and other security tools to rapidly identify, contain, and remediate complex threats
• Collaborate in developing and implementing custom correlation rules, dashboards, and alerts to enhance detection capabilities
• Drive threat hunts to find "quiet" persistent threats within our clinical and corporate environments
• Participate in continuous refinement of incident response playbooks, operational procedures, and security standards
• Perform security reviews of third-party vendors to identify risks and ensure they meet company standards