Senior Security Analyst, Security Operations (Threat Detection)

GitHub, Inc.•UNAVAILABLE, UNAVAILABLE

4d•Remote

About The Position

GitHub is seeking a Senior Security Analyst to join their Security Operations team, focusing on Threat Detection and Response. This role is crucial for evolving and advancing the security posture of GitHub and its ecosystem. The Threat Detection and Response (TDR) team is composed of analysts and engineers with diverse skills in security analysis, threat hunting, incident response, and tooling development. As a Senior Security Analyst, you will collaborate with Security, IT, and Engineering organizations to drive technical direction in security. You will be instrumental in developing GitHub's threat detection capabilities, identifying and prioritizing detection efforts, and fostering an innovative and collaborative environment through industry research and Purple Team exercises. The ideal candidate will have a strong desire to work with other security professionals to secure GitHubbers and GitHub systems at scale in diverse environments.

Requirements

7+ years experience in security analysis, security research, cyber security, security engineering, or relevant area OR Associate’s Degree AND 6+ years of experience OR Bachelor's Degree AND 5+ years of experience OR Master's Degree AND 3+ years experience OR Doctorate AND 1+ year(s) experience OR equivalent experience
5+ years of experience in threat hunting and/or detection engineering
3+ years of experience with SIEM solutions
5+ years of experience with software development in python

Nice To Haves

Experience and/or expertise with Microsoft Azure, Amazon Web Services or a similar cloud provider
Passionate about mentoring and helping their peers grow
Familiarity with data correlation and modern threat detection techniques
Knowledge and understanding of security controls across all security domains
The ability to take a pragmatic, risk-based approach to decision making while applying practical security principles and practices

Responsibilities

Partnering with other security teams to identify, investigate, and mitigate threats
Communicating persuasively with peers to inspire cooperation
Working solo or collaboratively while delivering simultaneous projects on a deadline
Developing, maturing and documenting security policy and processes
Participating in an on-call rotation
Collaborating on and leading purple team exercises
Making well-reasoned decisions that inspire and energize others
Continuously evaluating GitHub’s detection suite and identifying visibility gaps
Working non-standard working hours, including weekends and holidays approximately 1-2 times per month