Hybrid SOC Security Analyst - Incident Response & Analytics

lululemon; Seattle (WA); Hybrid; USD 118,000 - 154,000; Full time

Benefits offered by this job

Extended health and dental benefits, &

Paid time off

Savings and retirement plan matching

Generous employee discount

Fitness & yoga classes

Parenthood top-up

Development course offerings

People networks, mentorship programs,

leadership series

Job summary

lululemon seeks a Cyber Security Analyst to join its cybersecurity team in Seattle. You will perform SOC duties including incident response, malware analysis, and monitoring, triaging alerts and correlating with threat intelligence to identify threats and affected systems.

The role requires a computer science or security degree and 2–4 years in security operations, with strong knowledge of SIEM, EDR, firewalls, and cloud platforms (Azure/AWS/GCP).

Qualifications

• Bachelor’s in Computer Science, Information Security, Cybersecurity, or a related degree.
• 2–4 years of experience in Security Operations, Incident Response, Information Security Technology, etc.
• Strong security concepts of threat categories (malware, phishing, Defense-in-Depth, MITRE ATT&CK).
• Strong knowledge of M365 Security tools, Azure, AWS, GCP.
• Experience with SIEM, EDR, firewalls, IDS/IPS, anti-spam, content management, server and network device hardening.
• Strong knowledge of Windows, Linux and/or Mac OS.
• Good knowledge of networking protocols (SMTP, HTTP, HTTPS, etc).
• Experience with query languages and scripting languages.
• SharePoint, Excel, JIRA and/or Microsoft Office skills.

Responsibilities

• Triage alerts/incidents and perform deep analysis; correlate with threat intelligence to identify the threat actor, nature of the attack, and affected systems.
• Prioritize and triage alerts to determine real incidents and escalate to Tier 3 if remediation cannot be closed within SLA time.
• Analyze logs, network traffic, and other data sources to identify the source of incidents.
• Record identified vulnerabilities, create remediation tickets and track their status.
• Build internal scripts, tools, and automation processes to enhance detection and response capabilities.
• Adjust security tools and processes, e.g. EDR alerting modifications, updating detection rules conditions, etc.

Skills

Security Operations

Incident Response

Threat intelligence

SIEM tools

EDR

Firewalls

Windows

Linux

MacOS

Networking protocols

Scripting

JIRA

Education

Bachelor’s in Computer Science or Information Security

Tools

SIEM

EDR

Firewalls

IDS/IPS

SharePoint

JIRA

Microsoft Office

Cloud platforms (Azure/AWS/GCP)

Job description

lululemon seeks a Cyber Security Analyst to join its cybersecurity team in Seattle. You will perform SOC duties including incident response, malware analysis, and monitoring, triaging alerts and correlating with threat intelligence to identify threats and affected systems.

The role requires a computer science or security degree and 2–4 years in security operations, with strong knowledge of SIEM, EDR, firewalls, and cloud platforms (Azure/AWS/GCP).