Flock - Senior Security Analyst

• Leadership and Management: • Advanced Incident Investigation: Lead deep-dive investigations into complex security incidents escalated from Tier 1, utilizing SIEM, EDR, and Cloud telemetry to determine scope and impact. • Advanced Incident Investigation: • Containment & Remediation: Execute immediate containment strategies (e.g., host isolation, account resets, firewall blocks) and coordinate with IT and Engineering teams for full-system remediation across multiple operating systems (Windows, MacOS, Linux) • Containment & Remediation: • Mentorship: A passion for raising the bar for the entire team by mentoring junior analysts and conducting security awareness sessions across the company. • Mentorship • Technical Expertise: • Cloud Defender: Deep technical expertise in cloud security services across a multi-cloud environment – solid understanding of cloud-native security logging and identity management, as well as experience in responding to cloud infrastructure security alerts (compute, containers, serverless, networking). • Cloud Defender: • Detection Engineering: Extensive experience building and tuning high-fidelity alerts in modern SIEMs (e.g., Panther, Snowflake, or Splunk) and EDR platforms (e.g., SentinelOne, Crowdstrike). • Detection Engineering: • Automation First: Strong proficiency in Python or Go to build "security-as-code" tools, automate repetitive SOC tasks, and integrate disparate security APIs. • Automation First: • Unique Experience: DFIR across Android IoT devices, or OT systems and networks • Collaboration: Forge partnerships across Cybersecurity, Engineering, and Product teams to help coordinate actions as part of responding to security events–from exercise driven scenarios to real-world events. • Collaboration: • “Own It” Mindset: You don't wait for a ticket to fix a gap; you identify the risk, propose the solution, and drive it to completion. • “Own It” Mindset • Feeling uneasy that you haven’t ticked every box? That’s okay; we’ve felt that way too. Studies have shown women and minorities are less likely to apply unless they meet all qualifications. We encourage you to break the status quo and apply to roles that would make you excited to come to work every day. • 90 Days at Flock • 90 Days at Flock • We prescribe to 90 day plans and believe that good days lead to good weeks, which lead to good months. This serves as a preview of the 90 day plan you will receive if you were to be hired in this role at Flock Safety. • The First 30 Days • The First 30 Days • Build a deep understanding of Flock’s technology stack (hardware and cloud), our threat landscape, and existing incident response playbooks. • Establish strong partnerships with the DevOps, Infrastructure, and Product Security teams. • The First 60 Days • The First 60 Days • Identify and implement at least two major automation improvements to our current alerting pipeline to reduce "alert fatigue." • Conduct a gap analysis of our current logging and visibility across our enterprise, cloud, and product environments. • Begin participating in on-call rotation and assist with alert triage efforts • Review current process for alert triage and suggest improvements • 90 Days & Beyond • 90 Days & Beyond • Own a major component of our security roadmap (e.g., implementing a new Zero Trust architecture or maturing our SOAR capabilities). • Own the maturation of security playbooks ensuring proper documentation across all areas of incident response • The Interview Process • We want our interview process to be a true reflection of our culture: transparent and collaborative. Throughout the interview process, your recruiter will guide you through the next steps and ensure you feel prepared every step of the way. • Our First Chat: During this first conversation, you’ll meet with a recruiter to chat through your background, what you could bring to Flock, what you are looking for in your next role, and who we are. • Our First Chat: • The Hiring Manager Interview: You will meet with your potential future boss to really dive into the role, the team, expectations, and what success means at Flock. This is your chance to really nerd out with someone in your field. • The Hiring Manager Interview: • The Technical Assessment: Our technical assessments seek to test the hard skills required to do the job. Engineers may find themselves in coding interviews or architecture discussions, sales roles may present mock discovery calls, and leadership roles may craft 90 day plans. Your recruiter will inform you of which assessment you will be assigned and ensure you are fully prepared for your big day. • The Technical Assessment: • The Panel: Learn more about the team, responsibilities, and workflows. You should be prepared to speak about past projects, how you collaborate and communicate with others, and how you live our values. Depending on the team and role you are interviewing for, you may meet with several teammates as well as cross-functional partners. • The Panel: • The Executive Review: A chance to meet an executive in your function and view Flock from a different lens. Be prepared to ask well-thought-out questions about the company, culture, and more. • The Executive Review: • ⚕️Fully-paid health benefits plan for employees: including Medical, Dental, and Vision and an HSA match. • Fully-paid