Information Security Analyst II
Information Security Analyst II
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
About Netskope
Today theres more data and users outside the enterprise than inside causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed one that is built in the cloud and follows and protects data wherever it goes so we started Netskope to redefine Cloud Network and Data Security.
Since 2012 we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara St. Louis Bangalore London Paris Melbourne Taipei and Tokyo. Our core values are openness honesty and transparency and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships collaboration and teamwork. From catered lunches and office celebrations to employee recognition events and social professional groups such as the Awesome Women of Netskope (AWON) we strive to keep work fun supportive and interactive.Visit us atNetskope Careers. Please follow us on LinkedIn and Twitter@Netskope.
About the position
Netskope is looking for an analyst on the Threat and Vulnerability Management team. This position will focus on the identification and proactive mitigation of Netskopes attack surface threat landscape security gaps and cyber threats which could impact the business. In addition this role will be responsible for performing the vulnerability management function such as finding reporting and supporting business units in their vulnerability remediation efforts.
Roles & Responsibilities
- Continuous development and execution of the enterprise Threat and Vulnerability Management strategic plan to identify and reduce vulnerable attack surfaces
- Perform complex analysis to understand emerging threats and continuously demonstrates awareness of current threat posture
- Reviews emerging and existing threat methodologies and exploit code / proof of concept code to develop mitigations prioritize risks and navigating sources for identification of vulnerable assets.
- Execute on core team functions such as scanning reporting custom checks asset tagging as well as incorporating threat intelligence into vulnerability checks
- Automate security tasks using scripting languages such as python.
- Maintain and contribute to the threat models understanding emerging/existing threats and countermeasures to them.
- Partners with internal teams to lead develop test and continuously validate detection signatures for various attacks
- Provide internal teams with hardening guidance and develop tooling for auditing
- Support teams by being a Remediation Champion giving them guidance on various strategies to remediate a vulnerability and supporting them in their testing and validation efforts.
- Provides expertise in incident response activities.
- Teach and understand CVSS CVE and additional vulnerability ratings and methodologies
Qualifications/Requirements
- Experience 2 to 5 Yrs in Security
- Should possess relevant university degree and/or professional qualifications/certification (e.g. CEH OSCP)
- Must have knowledge with tools Tenable Qualys NMAP SCAPY and other tools.
- Must have the ability to understand hardening guidelines for new technologies and applications being adopted by Netskope.
- Understanding of containerization and containerized applications their security weaknesses and how to secure them
- Must have an understanding of patch automation security orchestration and management tooling for on premise private cloud and cloud infrastructure.
- Knowledge of OWASP Web and Mobile Top 10 vulnerabilities and identifying them.
- Knowledge of TCP/IP and other application and network level protocols.
- Knowledge of Cloud Applications like AWS Azure and other SAAS Applications.
- Excellent written and verbal communication skills.
- Self-motivated curious knowledgeable pertaining to news and current events.
- Ability to be effective in a remote global work environment.
Netskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion race color sex marital or veteran statues age national origin ancestry physical or mental disability medical condition sexual orientation gender identity/expression genetic information pregnancy (including childbirth lactation and related medical conditions) or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate.
Netskope respects your privacy and is committed to protecting the personal information you share with us please refer toNetskopes Privacy Policyfor more details.
Required Experience:
IC
Employment Type
Full Time
