Staff Information Security Analyst

Everything we do at Sunrun is driven by a determination to transform the way we power our lives. We know that starts at the individual employee level. We strive to foster an environment you can thrive in through our commitment to diversity, inclusion and belonging.

The Staff IT Security Analyst plays a vital role on the Technology Operations team with the ability to make a large impact on the company. Enjoy the freedom to think creatively and collaborate with an energetic team. Accelerate your career with exposure to high-profile, broad and world-class IT capabilities. The Staff IT Security Analyst manages and executes internal technology projects, daily operations, security technologies and supporting processes to ensure that technical solutions and operations processes meet the needs of the business, employees and customers. This role offers hands-on experience working with digital technology solutions, cloud solutions and development operations in a fast-paced, dynamic environment. 

This role executes on operations and security tasks, while driving measurable improvements in process and efficiency throughout the company. You will be expected to be proactive, organized and autonomous as you work across multi-disciplinary teams. Although we are seeking individuals with exposure to and interest in Security Operations, we don’t anticipate most candidates will have direct experience with all job responsibilities. If you like challenges and are eager to learn, Sunrun will do what it takes to support you and your growth in this role.

ESSENTIAL DUTIES AND RESPONSIBILITIES 

• Primarily responsible to manage and monitor the SIEM platform and perform the integration and onboarding of different log sources such as AV, DLP, EDR, WAF, Firewall etc.

• Create threat detection use cases in SIEM, WAF, EDR, Cloud security technologies to detect malicious or anomalous activity in our network and alert on it

• Utilize SOC Lab environment to simulate real life attacks and tune our security rules in accordance to the testing

• Monitor Open Source and Commercial Threat Intel feeds and Integrate those IOCs, TTPs into various security technologies

• Monitor, Detect and Respond security alerts within defined SLAs

• Participate in Major Incident Response Activities by collaborating with cross functional teams to contain and remediate the incidents

• Review Current Cyber Security Posture and threat landscape of Sunrun and recommend security best practices

• Participation in the development and maintenance of security standards, procedures and knowledge based articles

• Create cloud configurations using IaC templates (CloudFormation, Terraform, etc.) across all major clouds vendors. 

REQUIREMENTS (EDUCATION, EXPERIENCE, CERTIFICATIONS, AND OTHER SKILLS)

• Bachelor’s degree in Computer Science or Graduate degree in Information Security or equivalent job experience.

• 8+ years of experience as a Security Operation Center Analyst or Engineer and familiarity with EDR, WAF, DLP, CASB and SIEM technologies

• Have fair understanding of latest attack trends, CVEs, ransomware threat groups and is up to date with current cybersecurity affairs

• Worked with emails and email headers to analyze phish email

• Experience analyzing cloud traffic and logs

• Understands and able to interpret windows event logs

• Ability to collaborate and work in a fast paced and dynamic work environment with a strong team culture

• Knowledge on common protocols such as HTTP, DNS, SMTP, SFTP etc. is essential

• Knowledge on MITRE ATT&CK Framework, Cyber kill chain Model, and the respective mitigation techniques

• Familiarity with cloud security (AWS, Azure, Google Cloud Platform) and Agile methodologies

• Preferred if candidate has attended any security training or course related to CEH, Comptia Sec+, Penetration testing, MITRE etc.

• Good Communication and interpersonal skills are a big value add to this role

• Last but not the least, we are looking for curious, proactive and result oriented folks to join our team

Recruiter:

Please note that the compensation information that follows is a good faith estimate for this position only and is provided pursuant to acts, such as The Equal Pay Transparency Act. It assumes that the successful candidate will be located in markets within the United States that warrant the compensation listed. Candidates in locations outside this local area may have a different  starting salary range for this opportunity which may be higher or lower.  Please speak with your recruiter to learn more.

Starting salary/wage for this opportunity:

Other rewards may include annual bonus eligibility, which is based on company and individual performance, short and long term incentives, and program-specific awards.  Sunrun provides a variety of benefits to employees, including health insurance coverage, an employee wellness program, life and disability insurance, a retirement savings plan, paid holidays and paid time off (PTO). A candidate’s salary history will not be used in compensation decisions. 

This description sets forth the general nature and level of the qualifications and duties required of employees in this job classification, as well as some of the essential functions of this role.  It is not designed to be a comprehensive inventory of all essential duties and qualifications. If you have a disability or special need that may require reasonable accommodation in order to participate in the hiring process or to perform this role if you are offered employment, please let us know by contacting us at candidateaccomodations@sunrun.com.

Sunrun is proud to be an equal opportunity employer that does not tolerate discrimination or harassment of any kind. Our commitment to Diversity, Inclusion & Belonging drives our ability to build diverse teams and develop inclusive work environments. At Sunrun, we believe that empowering people and valuing their differences are essential for our mission of connecting people to the cleanest energy on earth. We are committed to equal employment opportunities without consideration of race, color, religion, ethnicity, citizenship, political activity or affiliation, marital status, age, national origin, ancestry, disability, veteran status, sexual orientation, gender identity, gender expression, sex or gender, pregnancy or any other basis protected by law. We also consider qualified applicants with criminal convictions, consistent with applicable federal, state and local law.