Security Analyst

Arista; Santa Clara (CA); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Snack Bash events

Wellness webinars

Medical, Dental & Vision plans

401k plan

On-site gym & showers

Life Insurance & AD&D

Job summary

Arista seeks an experienced security professional to join its Operational Security team in a hybrid-capable role in Santa Clara. You will monitor alerts, triage incidents, and support incident response across cloud environments.

Responsibilities include documenting findings, following IR procedures, and collaborating with teams to resolve threats. A strong background in SIEM, cloud security, and threat intel is required.

Qualifications

• Bachelor’s in Cybersecurity, CS, or a related technical field.
• 5+ years in information security with at least 2 years in cloud security.
• Strong knowledge of TCP/IP, DNS and security architecture.
• Experience with SIEM, SOAR, and cloud security logs.
• Proactive threat detection and incident response capabilities.
• Excellent communication and cross-functional collaboration.

Responsibilities

• Monitor security alerts across enterprise telemetry; investigate threats.
• Perform initial triage, analysis, and classification of incidents.
• Document findings and support comprehensive incident response.
• Follow IR procedures and escalate to senior analysts when needed.
• Gather threat intelligence to enhance monitoring capabilities.
• Collaborate with cross-functional teams to resolve incidents.

Skills

SIEM proficiency

Threat detection

Incident response

Cloud security

Vulnerability management

Scripting knowledge

Communication skills

Analytical thinking

Education

Bachelor's degree in Cybersecurity/CS/related field

Tools

GCP

Azure

AWS

SOAR

Job description

• You will join our Operational Security team, a group of dedicated professionals who serve as our organization’s initial line of defense
• In this collaborative environment, you will work closely with senior analysts to monitor security alerts across our enterprise telemetry, investigate potential threats, and support critical incident response efforts
• Our team thrives on shared expertise and hands‑on experience with diverse technologies to protect our infrastructure
• Monitor security alerts from various telemetry sources (SIEM, IDS/IPS, EDR) and elevate anomalies as necessary
• Conduct initial triage, analysis, and classification of security incidents
• Document investigative findings and assist in comprehensive incident response
• Follow established incident response procedures and elevate to senior analysts when required
• Gather threat intelligence to proactively enhance security monitoring capabilities
• Create, maintain, and review internal documentation for processes and procedures
• Implement cloud security reference architectures and guardrails rooted in Zero Trust and Least Privilege principles
• Support vulnerability management by identifying potential security weaknesses across the enterprise
• Conduct investigations and provide necessary triage, containment, and forensic support during cloud‑based security incidents
• Stay informed on emerging threats, vulnerabilities, and cybersecurity trends
• Collaborate with cross‑functional teams to ensure timely resolution of security incidents, providing guidance and recommendations
• Participate in project work, including proof‑of‑concepts (PoCs) for new tools and optimizations of existing technologies

Benefits

• Regular ”Snack Bash” Social Events with food and drinks!
• Biweekly Wellness webinars plus regular Wellness Week events focused on physical, mental, spiritual and financial wellness as well as career development and social activities
• Arista Gives Back: Employee Engagement Giving Drives and Volunteer events
• Medical, Dental & Vision Plan Coverage
• Life Insurance, AD&D, STD & LTD
• Flex Spending Accounts
• Employee Assistance Programs
• PTO & Paid holidays
• 401k Plan
• On‑site Gym & Showers
• Secured Bike Lockers
• Secured Bike LockersFlexible hours
• Employee Assistance Benefits that include mental health and backup child and elder care support
• Discounted lunches through WeBox for HQ employees
• Family planning benefits

Local/Regional candidates only

• Familiarity with SIEM tools, logging platforms, firewalls, antivirus, and EDR solutions
• Preferred Certifications: CompTIA Security+, CySA+, BTL1, or Cloud Security certifications
• Demonstrated proficiency with a minimum of two major public cloud platforms (GCP and Azure preferred; AWS and OCI are advantageous)
• Experience with SIEM & SOAR administration is desirable but not essential
• Bachelor’s degree in Cybersecurity, Computer Science, or a related technical field (or equivalent practical experience)
• A minimum of 5 years of progressive experience within Information Security, specifically including 2 or more years dedicated to Cloud security initiatives
• Core understanding of network protocols (TCP/IP, DNS) and security architecture
• Technical Skills: Basic scripting knowledge (Python, PowerShell, or Bash) is a plus
• Local to area with a Flexible hybrid working arrangement
• Professional Skills: Strong analytical problem‑solving abilities, excellent communication skills, and the ability to thrive in a fast‑paced environment
• Strong foundational understanding of both macOS and Windows environments