Cybersecurity Analyst — Incident Response & Threat Detection

Socket.dev; San Diego (CA); On-site; USD 117,000 - 130,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) retirement plan

HSA & FSA

Life insurance

Disability insurance

Paid time-off

Sick leave

Holidays

Job summary

The Bumble Bee Seafood Company is seeking a Cybersecurity Analyst to lead day-to-day security operations, investigate incidents, and tune detection tooling. You’ll own the incident response lifecycle, collaborate with IT for patching, and help align operations with security standards.

The role requires hands‑on security experience, compliance awareness, and cross‑functional collaboration to protect data and assets. A competitive benefits package is included.

Qualifications

• 4+ years of experience in cybersecurity or information security roles.
• Relevant certifications (e.g., ISC2) preferred.
• Experience with incident response, threat detection, and log correlation.
• Proficiency with SIEM platforms and detection engineering.
• Experience with vulnerability management tools (e.g., Tenable, Qualys).
• Working knowledge of Windows and Linux operating systems, command‑line tools, and system architecture.
• Experience with Security Awareness Training platforms.
• Understanding of the MITRE ATT&CK framework.
• Understanding of networking fundamentals and protocols (TCP/IP, UDP, DNS).
• Experience with governance and endpoint detection and response (EDR) platforms (e.g., Microsoft Defender, Purview, Sophos, CrowdStrike).
• Experience using secure API tools for automation and orchestration.
• Knowledge of industry frameworks and standards (e.g., NIST, SOC, ISO, CIS).
• Tabletop exercise and penetration testing experience.
• Understanding data protection, disaster recovery, and business continuity planning.

Responsibilities

• Further develop and mature the security program - Identify, analyze, monitor and manage security events and incidents, owning the full incident response lifecycle.
• Collaborate with IT to prioritize, validate, and track patching and vulnerability remediation.
• Collaborate with IT engineers to implement, and optimize SIEM platforms, and fine‑tune existing threat detection tools to strengthen overall security posture.
• Conduct security risk assessments for existing and prospective platforms and vendors, including AI and SaaS solutions.
• Perform ongoing account auditing and access control reviews, to maintain compliance and reduce risk.
• Involved in the development and review of enterprise IT policies.
• Monitor public threat intelligence and vulnerability CVE disclosures to assess business impact and coordinate remediation efforts.
• Enhance existing cybersecurity tools to strengthen overall organizational security posture.
• Build, update, and maintain incident response playbooks, procedures, and technical documentation.
• Collaborate with cross‑functional teams to align business operations with acceptable use standards, ensuring organizational goals are met while enabling the secure adoption of AI‑driven technologies.
• Promote cybersecurity awareness through tabletop exercises, phishing prevention, and ongoing user training initiatives.
• Advise on and assess third‑party due diligence for security risk to the Bumble Bee environment, including third‑party risk assessments, review of contracts for protections, and third‑party training where required (e.g., offshore consultants).
• Proven ability to collaborate across business units and influence security best practices.
• Other duties as assigned.

Skills

Incident response

Threat detection

Log correlation

SIEM platforms

Detection engineering

Vulnerability management

Windows

Linux

Security Awareness Training

MITRE ATT&CK

Networking fundamentals

EDR platforms

Secure API tools

Industry frameworks

Tabletop exercises

Disaster recovery planning

Tools

Tenable

Qualys

Microsoft Defender

Purview

CrowdStrike

Job description

The Bumble Bee Seafood Company is seeking a Cybersecurity Analyst to lead day-to-day security operations, investigate incidents, and tune detection tooling. You’ll own the incident response lifecycle, collaborate with IT for patching, and help align operations with security standards.

The role requires hands‑on security experience, compliance awareness, and cross‑functional collaboration to protect data and assets. A competitive benefits package is included.