Senior SOC Analyst – CrowdStrike & Threat Hunting (Remote)

Arista Networks, Inc.; Polska; Hybrid; PLN 276,000 - 473,000; Full time

Job summary

Arista Networks, Inc. seeks a Security Operations Center (SOC) Analyst to monitor and respond to cyber threats in a primarily Mac and Linux environment with some Windows systems. You will write CrowdStrike queries, build detections, and collaborate with cross‑functional partners to strengthen security controls.

The role requires hands-on EDR experience, strong incident response capabilities, and the ability to thrive in a high‑pressure, remote work setting. 24x7 on-call coverage is expected.

Qualifications

• Hands-on with CrowdStrike (EDR) and threat detection.
• Experience writing CQL or similar queries for detections.
• Strong incident response and triage skills in high‑volume SOC.
• Proactive threat hunting using SIEM/EDR features.
• Familiarity with OSINT tools and threat intel feeds.
• Experience with Mac and Linux environments; Windows a plus.

Responsibilities

• Monitor and triage security alerts.
• Build, test, and refine detections across Mac, Linux, and Windows.
• Analyze incidents including malware, phishing, and APTs using SIEM/EDR.
• Proactively hunt threats using SIEM and EDR capabilities.
• Investigate incidents and respond following IR protocols.
• Document findings and provide remediation recommendations.
• Collaborate with IT, engineering, and DevOps to improve controls.
• Stay current on threats and industry trends; participate in 24x7 on-call rotation.

Skills

CrowdStrike EDR

CQL queries

SIEM

Incident response

Threat hunting

Mac/Linux expertise

Windows knowledge

On-call rotation

Education

Bachelor’s degree in Cybersecurity, IT, CS, or related field

Tools

CrowdStrike Fusion SOAR

VirusTotal

SIEM platforms

CrowdStrike EDR

CQL tooling

Job description

Arista Networks, Inc. seeks a Security Operations Center (SOC) Analyst to monitor and respond to cyber threats in a primarily Mac and Linux environment with some Windows systems. You will write CrowdStrike queries, build detections, and collaborate with cross‑functional partners to strengthen security controls.

The role requires hands-on EDR experience, strong incident response capabilities, and the ability to thrive in a high‑pressure, remote work setting. 24x7 on-call coverage is expected.