Cyber Security Analyst

This is a fully remote position, open to applicants in California, +3 more states.

📋 Description

• Oversee Incident Response initiatives for corporate, cloud, and product settings, encompassing investigation, containment, eradication, and recovery.

• Execute threat hunting activities across endpoints, networks, and cloud workloads to proactively detect indicators of compromise, emerging threats, and control deficiencies.

• Perform cloud incident response for AWS, Azure, GCP, and other cloud environments, including Kubernetes and containerized workloads, conducting log analysis, identity compromise investigations, and workload forensics.

• Lead product security incident response efforts, working closely with engineering teams to assess potential exposure to vulnerabilities, exploits, and security flaws in NVIDIA products.

• Conduct digital forensics and malware analysis to assist in investigations and root cause determination.

• Create and enhance security orchestration and automation playbooks in collaboration with Security Engineering to expedite detection and response.

• Develop and refine detection and defense strategies based on threat models and attacker behaviors across cloud, identity, endpoint, and product telemetry, utilizing frameworks like MITRE ATT&CK to map adversary tactics and improve detection coverage.

• Offer guidance to engineering and business teams regarding secure design and incident handling standards, and contribute to security policies, standards, and metrics to continually enhance NVIDIA’s security posture.

⛳️ Requirements

• Bachelor's degree in Computer Science or a related discipline, or equivalent experience.

• Over 8 years of practical experience in incident response and threat hunting, including in cloud environments.

• In-depth knowledge of cloud security principles, identity and access management, and workload protection.

• Experience in product security investigations, vulnerability analysis, and secure coding practices.

• Expertise in forensic analysis, intrusion detection, and threat intelligence.

• Advanced understanding of network analysis, OS internals (Windows/Linux/macOS), and web application security, including the capacity to identify abnormal behaviors and assess exploit paths.

• Capability to work autonomously and collaborate efficiently across global teams.

• Relevant certifications such as GCIH, GCFA, AWS/Azure Security Specialty, CISSP.

• Familiarity with cloud-native security tools (e.g., AWS GuardDuty, Azure Sentinel, GCP Security Command Center).

• Development experience in Python, Go, or similar languages for creating security automation.

• Practical experience with container security (Docker, Kubernetes), CI/CD pipelines, and AI security.

• Advanced knowledge in digital forensics and malware reverse engineering.

🏝️ Benefits

• Equity

• Benefits