Cyber Security Analyst

$122,000 - $183,000/Yr

Anduril Industries - Costa Mesa, CA

Full-time - Mid Level

Costa Mesa, CA

Professional, Scientific, and Technical Services

About the position

Anduril Industries is seeking a Cyber Security Analyst to join their Information Security team. This role is crucial for monitoring and responding to adversarial activities that threaten the company's defense technologies. The analyst will work closely with the detection engineering team to develop detection signatures and improve incident response processes, ensuring the security of various environments including cloud and on-premises systems.

Responsibilities

• Triage and respond to alerts/incidents across multiple disciplines including phishing, endpoints, AWS infrastructure, and SaaS applications.
• Build and optimize tailored detection signatures, response playbooks, and response automation using detection-as-code principles.
• Lead the feedback loop for detections, ensuring alerts are fine-tuned to reduce false positives.
• Participate in threat modeling scenarios with cross-functional partners to identify weaknesses across Cloud, Mobile, Endpoints, and other environments.
• Engage in threat hunting initiatives, collaborating with engineering and product teams to enhance detections and security controls.
• Participate in an on-call rotation to respond to security events and conduct incident response investigations.

Requirements

• Experience in security monitoring, log analysis, and detection engineering within large data sets across endpoint, network, and various application log sources.
• Proficiency in Bash and/or PowerShell for incident investigations and analysis.
• Broad practical security knowledge across endpoint, network, identity, application, and cloud infrastructure.
• Knowledge of attacker tactics, techniques, and procedures (TTPs).
• Strong communication skills and experience collaborating with internal and external stakeholders.
• Must be eligible to obtain and maintain a U.S. TS clearance.

Nice-to-haves

• Some experience with Python is a plus.
• Experience conducting incident response in the Cloud (AWS, Azure, GCP).
• Experience proactively threat hunting using threat intelligence to identify potential risks and weaknesses in telemetry.

Benefits

• Commuter assistance
• AD&D insurance
• Disability insurance
• Relocation assistance
• Health insurance
• Dental insurance
• 401(k)
• Paid time off
• Vision insurance
• Life insurance