Remote SOC Analyst: CrowdStrike Expert for Mac/Linux

Arista Networks, Inc.; Santa Clara (CA); Remote; USD 110,000 - 150,000; Full time

Job summary

Arista Networks, Inc. is seeking a proactive Security Operations Center (SOC) Analyst to monitor, triage, and respond to cybersecurity threats across Mac, Linux, and Windows environments. The role collaborates with incident responders, threat hunters, and IT/DevOps to strengthen security controls and detection capabilities.

The ideal candidate has hands-on CrowdStrike experience, can write CQL queries for detections, and thrives in high-pressure, remote teams with 24x7 on-call responsibilities.

Qualifications

• 4-5+ years in a SOC or incident response.
• Hands-on experience with CrowdStrike (or other EDR).
• Ability to write CQL queries and build detections for threat monitoring.
• Experience triaging alerts in a high-volume environment.
• Familiarity with threat intel feeds and OSINT tools (VirusTotal, etc.).
• Familiarity with forensic analysis and evidence handling.

Responsibilities

• Monitor and triage security alerts.
• Build, test, and refine detections for Mac, Linux, and Windows.
• Analyze security incidents including malware, phishing, and APTs using SIEM/EDR.
• Perform proactive threat hunting with SIEM/EDR features.
• Investigate incidents and respond per IR protocols.
• Document findings and provide remediation recommendations.
• Collaborate with cross-functional teams to strengthen controls.
• Stay current on threats and trends through self-directed learning.
• Participate in on-call rotation for 24x7 SOC coverage.

Skills

SOC experience

Incident response

Threat analysis

CQL scripting

Threat hunting

Log/endpoint analysis

On-call reliability

Documentation

Education

Bachelor’s degree or equivalent

Tools

CrowdStrike

EDR tooling

SIEM

VirusTotal

Job description

Arista Networks, Inc. is seeking a proactive Security Operations Center (SOC) Analyst to monitor, triage, and respond to cybersecurity threats across Mac, Linux, and Windows environments. The role collaborates with incident responders, threat hunters, and IT/DevOps to strengthen security controls and detection capabilities.

The ideal candidate has hands-on CrowdStrike experience, can write CQL queries for detections, and thrives in high-pressure, remote teams with 24x7 on-call responsibilities.