Arista Networks
Security Operations Center (SOC) Analyst
PL · Poland - Remote, , Poland · Remote · Full-time
24x7 on-call rotation,需适配轮班时区
Salary not stated
AI summary
About the company
Arista Networks是数据驱动的客户到云网络领域领导者，服务数据中心、园区和路由环境，以创新为核心，获最佳工程团队等多项奖项，重视多元化与包容性。
Role overview
该岗位为Arista Networks的全职远程安全运营中心分析师，加入远程网络安全团队，负责监控、分类和响应Mac、Linux及Windows环境的网络威胁，需与跨职能团队协作，撰写检测规则，参与24x7轮班，保障组织安全态势。
Responsibilities
- 监控并分类安全警报
- 构建、测试和优化Mac、Linux、Windows系统的威胁检测规则
- 分析安全事件（恶意软件、钓鱼、高级持续性威胁）
- 利用SIEM和EDR进行主动威胁狩猎
- 快速调查并响应事件，遵循事件响应协议
- 记录发现并提供可操作的修复建议
- 与跨职能团队协作强化安全控制
- 参与24x7x365 SOC轮班
Requirements
- 4-5年以上SOC或事件响应团队经验
- 具备CrowdStrike（或其他EDR）的实践经验
- 能编写CQL（或类似）查询并构建检测规则
- 具备高流量环境下警报分类经验
- 熟悉威胁情报源及OSINT工具（如VirusTotal）
- 了解取证分析与证据处理
- 具备Mac、Linux为主，Windows为辅的操作系统知识
Nice to have
- 编写并优化检测规则
- 掌握Python等脚本语言自动化SOC工作流
- 有CrowdStrike Fusion SOAR（或类似）剧本创建经验
- 了解云安全（GCP、AWS、Azure）
- 拥有网络安全等相关学士学位或同等经验
Register to apply directly, open the original posting and save jobs
Sign up freeThis is not an official page of Arista Networks. The listing is gathered automatically from the employer's official careers page or a job board's public feed (see sources on the right). Fintegrity has no agency relationship with this employer and has not verified its credentials. Chinese titles and summaries are AI-generated; the original text prevails. Apply on the source page. We never charge job seekers. Ranking & display rules
Excerpt
Company Description Arista Networks is an industry leader in data-driven, client-to-cloud networking for large data center, campus and routing environments. What sets us apart is our relentless pursuit of innovation. We leverage the latest advancements in cloud computing, artificial intelligence,…
Sign up freeThe summary and highlights are AI-generated and may contain errors; the original posting prevails.
Sources or employers who want a posting removed or corrected can email contact@fintegrity.cn; we act within 24 hours.