Triage Security Analyst

At Arctic Wolf, we're not just navigating the cybersecurity landscape - we're redefining it. Our global team of dedicated Pack members is driving innovation and setting new industry standards every day. Our impact speaks for itself: we've earned recognition on the Forbes Cloud 100, CNBC Disruptor 50, Fortune Future 50, and Fortune Cyber 60 lists, and we recently took home the 2024 CRN Products of the Year award. We’re proud to be named a Leader in the IDC MarketScape for Worldwide Managed Detection and Response Services and earning a Customers' Choice distinction from Gartner Peer Insights. Our Aurora Platform also received CRN’s Products of the Year award in the inaugural Security Operations Platform category. Join a company that’s not only leading, but also shaping, the future of security operations. 

About the Role:

The Security Analyst is a front-line Operations Center role, supporting our security services around the world. The SA is an internal triage analyst who assesses inbound security data and communications, dealing with straightforward tasks and escalating to our Security Engineers as needed.
 

As a Triage Security Analyst you will:

• Understand IT infrastructure and networking to be able to quickly dispatch security incidents with the help and guidance of Senior Security Personnel.

• Triage customer requests, apply playbook driven solutions, initiate potential incident investigations through assignment to security engineers and may assist the engineers with use web-based resources to determine if a given event is potentially real, or more importantly that it is benign.

• Attention to process and a willingness to learn are critical assets for the right candidate.

• Strong communication skills and easily interact with a variety of different people and personalities. Success in this role depends on the effective dispatch of both security and communication triage events to the correct persons in a timely manner.

• Understand the processes and systems Arctic Wolf uses, this will be critical in helping the Senior Security staff handle their customers as support specific customer requests.

• Creating and amending runbooks that aid in expanding the knowledge of your peers

• Continuously drive to learn new aspects of the security business.

Arctic Wolf Networks is a start-up and all CSA candidates should expect to be working with all parts of Arctic Wolf, including engineering, operations, sales, marketing, and executive management. A positive can-do attitude is a must. A willingness to learn and try new things is critical. An ability to deal with uncertainty is a positive.

We are looking for someone who has most of the following skills and experience:

• 1+ years industry experience or equivalent training; Helpdesk, System Admin, Network Security, or Cybersecurity roles are a plus

• Have a basic technical understanding in three (3) of the following

• Networking – common protocols, server/client infrastructure, routers, switches, WAPs, etc

• Perimeter – firewalls, IDS, IPS, UTM, WAF, Gateways, Proxys, Mail Servers, etc

• Authentication – AD, SSO, MFA, etc

• IaaS – cloud services, AWS, Azure, GCP

• End Point – MDM, EDR, EPP, AV

• SaaS – collaboration tools including O365, GSuite, Box, Salesforce, Workday, etc

• Participation in CTFs, home labs, or THM / HTB / Immersive Labs, etc. highly desirable

• Demonstrable writing, speaking, and customer service skills

• A willingness to learn and continuous self-improvement

• A four year degree in cybersecurity or technology is a plus

• Cybersecurity related certifications are highly desirable (ex: GSEC, Security+, Network+, CCNA, CySA+, Pentest+, SSCP, ISC2 CC, GCP, AWS, etc.)

• Must be willing to work in office

You will be required to attend trainings, seminars, or webinars relevant to job role to enhance current knowledge base and skill set in order to improve job performance and efficiency. Attend at least one event in a year and should not impact job/project deliverables.

On-Camera Policy

To support a fair, transparent, and engaging interview experience, candidates
interviewing remotely are expected to be on camera during all video interviews.
Being on camera fosters authentic connection, improves communication, and allows for full engagement from both candidates and interviewers. We understand that technical, bandwidth, or location-related challenges may occasionally prevent video use. If this applies, candidates are required to notify us in advance so we can
explore appropriate acco