ExtraHop - Product Security Analyst III

• 5+ years of experience in cybersecurity, with a focus on compliance frameworks like FedRAMP, SOC 2, or similar • 2+ years of which should be hands-on experience specifically managing compliance programs, security assessments, or cloud security initiatives • Bachelors degree in a related field such as Cybersecurity, Computer Science, Information Systems, Engineering or other technical field • Direct experience with the FedRAMP compliance framework, including security control requirements, documentation and assessment methodologies • Technical knowledge of web application security and cloud security, including best practices and controls for cloud-based environments • Proficient with security tools, including vulnerability scanners, ticketing systems (e.g., Jira), compliance reporting platforms, and SIEM tools • Exceptional analytical skills to effectively manage and resolve security and compliance issues • Proven ability to communicate complex security concepts to technical and non-technical audiences • All R&D Employees will be required to attend 2 mandatory in-person events every year. These events are typically held in our offices in downtown Seattle and run 4-5 days each • Must be a U.S. citizen or national, U.S. permanent resident (current Green Card holder) or lawfully admitted into the U.S. as a refugee or granted asylum • Experience supporting certifications like SOC 2, ISO 27001; familiarity with additional federal or industry security frameworks (e.g., CMMC, IL4, DoDIN APL, NIAP, FIPS) • Strong project management skills with the ability to balance compliance initiatives and security operations • Experience working in a security operations center (SOC) and/or leading security incident response activities • Relevant security certifications such as CISSP, CISA, or CISM are preferred • The salary range for this role is $135,000 - $149,000 + bonus + benefits • ExtraHop is reinventing Network Detection and Response (NDR) to offer enterprises unparalleled visibility, context, and control against emerging threats. The platform integrates NDR with Network Performance Management (NPM), Intrusion Detection Systems (IDS), and forensics, providing a single, comprehensive solution. By decrypting and analyzing complete packet-level data at wire speed and leveraging cloud-scale machine learning, ExtraHop empowers Security Operations Centers (SOCs) to detect, investigate, and remediate modern cyber risks in real time across their entire hybrid infrastructure, including data center, cloud, and SASE environments. • This comprehensive approach and market innovation have earned ExtraHop unique recognition as the only NDR vendor acknowledged as a leader by all major analyst firms, including the 2025 Gartner® Magic Quadrant for Network Detection and Response™, the 2025 Forrester® Wave for Network Analysis and Visibility, the 2024 IDC® Marketscape for NDR, and the 2025 Gigamon® Radar Report for Network Detection and Response. Since 2007, ExtraHop has consistently helped organizations worldwide extract in-depth network telemetry and contextual insights, affirming its commitment to protecting and empowering the connected enterprise. • OUR VALUES • Our culture is rooted in our five Values. These set the expectations for how we work individually and collectively as a team. • Values • Lead with Purpose: We are driven to deliver results that create a positive impact for our customers, partners, and colleagues. • Lead with Purpose: • Act with Integrity: We operate with transparency, authenticity, and always in the best interest of the company. • Act with Integrity: • Find a Way: We are resourceful, tackle hard problems with a sense of urgency and ownership, and do what it takes to get the job done. • Find a Way: • Innovate: We listen to customers, partners, and the market, and respectfully push boundaries and challenge the status quo. • Innovate: