Senior Security Operations Center Analyst

RingCentral•Belmont, CA

6d•Onsite

About The Position

As a SOC Analyst at RingCentral, your primary responsibilities are to implement a comprehensive security monitoring, incident response and threat intelligence program for RingCentral’s global cloud service, corporate and development environments. You will also be collaboratively providing feedback to improve security operations processes, generating actionable analysis and threat intelligence from tools, logs, and other data sources, ensuring strong documentation is in place to support ongoing SOC activities, and reporting your observations to other Security, Operations and IT personnel. Job Description: Have proven skills in application security, security monitoring, incident response and intrusion analysis Have strong knowledge of the diverse methods and technologies used to attack web/mobile/desktop applications, SaaS infrastructure, and data Think critically, work well under pressure, and possess strong analytical, written, verbal, and interpersonal skills Demonstrated track record of quality processes in candidate’s work history Be strongly self-motivated with an aptitude for both individual and team-oriented work Have experience following and refining standard operating procedures and playbooks

Requirements

2+ years in a security engineering, SRE, or SOC roles in a cloud services environment
Experience with SIEM
Experience investigating security incidents
Basic knowledge AWS or GCP
Experience with IDS, case management, and related tools and practices
Experience with Linux, RedHat preferred
Basic knowledge of broad security topics such as encryption, application security, malware, ransomware, etc.
Knowledge of network, VoIP and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, SIP, RTP)

Nice To Haves

Experience using Crowdstrike, Cloudflare, FirePower, Splunk, ELK, Imperva, Syslog, packet capture, and Windows Event Log tools and similar tools
Knowledge of current hacking techniques, malicious code trends, botnets, exploits, malware, DDoS, and data breach events
Strong knowledge of Microsoft Windows
Experience automating security tasks, including scripting, programming and/or SecDevOps
Experience working with global teams
Any combination of the following certifications: GCIA (GIAC Certified Intrusion Analyst) GCIH (GIAC Certified Incident Handler) GCIA (GIAC Certified Intrusion Analyst) GCFA (GIAC Certified Forensic Analyst) GNFA (GIAC Certified Network Forensic Analyst) GCFE (GIAC Forensic Examiner) GASF (GIAC Advanced Smartphone Forensics) GICA GCTI (GIAC Certified Cyber Threat Intelligence) GPEN (GIAC Certified Pentester) GWAPT (GIAC Certified Web Application Pentester) GPYC (GIAC Certified Python Coder) OSCP (Offensive Security Certified Pentester)

Responsibilities

Monitor security events, analyze and investigate alarms, and maintain day-to-day operational activities of a secure cloud environment
Engage teams within and outside of RingCentral to mitigate and resolve cases
Maintain relevant documentation and audit artifacts
Identify and track suspicious system activity
Identify trends and patterns, and present them to Security Engineers to enhance our processes and systems

Benefits

Comprehensive medical, dental, vision, disability, life insurance
Health Savings Account (HSA), Flexible Spending Account (FSAs) and Commuter benefits
Voluntary supplemental health coverage and life insurance
401K match and ESPP
Paid time off and paid sick leave
Paid parental and pregnancy leave
Family-forming benefits (IVF, Preservation, Adoption etc.)
Emergency backup care (Child/Adult/Pets)
Employee Assistance Program (EAP) with counseling sessions available 24/7
Free legal services that provide legal advice, document creation and estate planning
Employee bonus referral program
Student loan refinancing assistance
Employee 1:1 coaching, perks and discounts program