Senior Security Analyst (Threat Detection & Response)

About the role:

The Senior Security Analyst is an integral contributor to the effectiveness of HubSpot's information security program. You will play a critical role in safeguarding our organization's digital assets and ensuring the integrity of our information systems. You will be responsible for monitoring, detecting, and responding to security threats, as well as implementing proactive measures to strengthen our cybersecurity posture. This role requires a keen eye for detail, deep security domain knowledge, and the ability to analyze complex data to identify potential threats. You’ll aspire to become a subject matter expert in both our information architecture as well as the tools, policies, and processes we utilize to protect it. You’ll maintain knowledge of the evolving threat landscape in order to identify relevant risks and determine if adjustments are required.

In This Role You’ll:

• Monitor and respond to security events / incidents
• Work with partner teams on security related projects
• Leverage an automation first mindset to work smarter / more efficiently
• Utilize your curiosity to identify vulnerabilities and gaps in internal and external applications, systems, and services
• Consult stakeholders on security-related subjects ranging from general OpSec, infrastructure architecture etc
• Foster engagement and progression of junior team members

Key Attributes:

• Hands-on security operations experience working within a modern zero trust oriented cloud / SaaS-heavy environment
• Strong understanding of incident response best practices with practical experience responding to moderate to complex security incidents
• Solid experience using SIEM tools (Splunk) for security investigations
• Ability to collect / analyze large sets of structured / unstructured data from disparate sources
• Experience using various security tools (EDR, web proxy, IDaaS etc) to assist with an investigation
• Strong networking and systems knowledge with a good understanding of macOS and Windows internals
• Experience working collaboratively to define and implement security policies, procedures, and controls
• Experience providing internal security consultancy / advice to other teams within the company
• Experience using code (Python / Powershell) to solve problems, facilitate easier data analysis, and to automate security tasks
• Acutely aware of industry security trends, advisories, news, and general research

Ideal Candidate (5+ years general security experience):

• Deep knowledge of macOS and Windows internals and practical experience using it to secure such systems
• Moderate to deep knowledge of linux (RHEL) internals
• Experience in detection engineering processes / behaviors
• Experience monitoring / securing AWS, GCP, or Azure cloud environments
• Knowledge of containerization software and how to secure them (Docker, Kubernetes, OpenStack)
• Experience using automation tools / frameworks / applications
• Experience conducting data analysis using tools such as R, Tableau, PowerBI, Jupyter Notebook
• Planning, coordinating, and / or executing security assessments of networks, systems, applications, and cloud platforms

---

Cash compensation range: 112800-169200 USD Annually

This resource will help guide how we recommend thinking about the range you see. Learn more about HubSpot’s compensation philosophy from Katie Burke, HubSpot’s Chief People Officer.

The cash compensation above includes base salary, on-target commission for employees in eligible roles, and annual bonus targets under HubSpot’s bonus plan for eligible roles. In addition to cash compensation, all HubSpotters are eligible to participate in HubSpot’s equity plan to receive restricted stock units (RSUs). Some roles may also be eligible for overtime pay. Individual compensation packages are based on a few different factors unique to each candidate, including their skills, experience, qualifications and other job-related reasons.

We know that benefits are also an important piece of your total compensation package. To learn more about what’s included in total compensation, check out some of the benefits and perks HubSpot offers to help employees grow better.

At HubSpot, fair compensation practices isn’t just about checking off the box for legal compliance. It’s about living out our value of transparency with our employees, candidates, and community.