Security Operations Center Analyst

We offer a flexible working policy that supports the health and well-being of our iManage employees. As an organization, we value collaborating and learning from our peers in person, while providing the necessary flexibility for our employees to have a meaningful work-life balance. Please reach out to learn more.

Being a Security Operations Analyst at iManage means…

The iManage Cloud Security Operations team is expanding and is actively searching for technical professionals to come join our dedicated, energetic and fast-growing global team. If you are currently in another area of IT, and are considering a move into Information Security, this position is the gateway into that world. Prior experience is less important to us than the capability, willingness and motivation to learn across a wide variety of technical areas.

The position is primarily responsible for the day-to-day monitoring of, and initial security event detection analysis for, all production systems, network infrastructure as well as all related information security systems, data and event logs using our SIEM and related tools. This position will, when needed, triage and escalate higher priority events to other analysts & engineers and provide the needed technical information for further analysis. Additionally, the SOC Analyst assists in identifying, analyzing and influencing the management of security risks across the organization based on observed events, logs and collected threat intelligence.

I’m responsible for…

1. Monitor and respond to security & system events from a variety of systems and sources in a timely manner and with the highest level of courtesy, professionalism and respect.
2. Handle day to day monitoring of, and remediation for, all security related infrastructure, both private and public cloud, using tooling such as Zabbix, Nagios or Prometheus.
3. Prepare and document standard operating procedures then, using automation tooling such as Ansible, Terraform, PowerShell or Python, create managed automation to handle the day-to-day work in Azure and/or Kubernetes.
4. Interface with other teams throughout the organization with the objective to provide high quality and low friction, security operations services.
5. Develop technical solutions and tools to help detect and mitigate security vulnerabilities as well as automate repeatable tasks.
6. Act as part of the incident response team providing troubleshooting, analysis and forensics when needed.

I’m qualified because I have…

1. 3+ years of general, yet practical, IT or similar technology experience. System, network or similar experience preferred; others will be considered.
2. 3+ years of Information Security connected experience, either directly or indirectly, along with the capability, willingness and motivation to absorb new technical information at an accelerated pace.
3. Exposure to automation and scripting tools such as Ansible, Terraform, Python or PowerShell.
4. Basic understanding of endpoint protection and Anti-Virus, Windows Defender preferred but others would be a suitable replacement.
5. Ground-level understanding of Azure or similar cloud service such as Amazon Web Services. Certification(s) would stand out.
6. Ability to articulate the concept of a SIEM along with the desire to develop a deeper understanding quickly.
7. Highly motivated to consume, process and convert newly obtained knowledge & experience into their day-to-day work.
8. Nearly innate desire to figure things out along with dedication to maintaining a lifelong commitment to continuous learning.
9. Excellent verbal and written communication skills in both in-person and electronic forms.
10. Comfortable with operating under minimal supervision after being given the direction and tools, in a fast-paced environment.
11. Ability to think in a non-linear, yet almost rigorously analytical, type of problem-solving mindset.
12. Understanding of global schedules that often require nontraditional, and non-US, working hours.
13. Capability to follow prescribed processes and procedures.

Bonus points if I have...

1. Configuration and/or administration of a SIEM is a plus, Splunk preferred.
2. Experience in firewall administration, Palo Alto & Panorama preferred, including functions such as firewall ACL’s, DNS block lists and VPN.
3. Cursory understanding of PKI infrastructure including SSL certificates issued by third party Certificate Authorities and/or the Microsoft Windows Certificate Authority.
4. Scripting and automation experience using Python, PowerShell or similar.
5. One or more of the following certifications: CompTIA Security+ or GIAC Security Essentials (GSEC), CompTIA Network+ or CCNP/CCNA or similar.

Don't meet every qualification listed above? Studies show that women and people of color are less likely to apply to jobs unless they meet all qualifications. At iManage, we are committed to building a diverse and inclusive environment, and encourage everyone to show up as their full authentic selves. We welcome those that come with a growth mindset and a hunger for learning; so, if you are excited about this role but your past experience doesn't align perfectly with every qualification we encourage you to apply anyways!

I’m getting to…

1. Join a supportive, experienced team with an inclusive, encouraging, and vibrant culture.
2. Have flexible work hours that allow me to balance my ‘me time’ with my work commitments.
3. Collaborate in a modern open plan workspace, with a gaming area, free snacks, drinks and regular social events.
4. Focus on impactful work, solving complex, real challenges utilizing the latest technologies and protocols.
5. Own my career path with our internal development framework. Ask us more about this!
6. Learn new skills and earn certifications with access to unlimited courses in LinkedIn Learning.
7. Join an innovative, industry leading SaaS company that is continuing to grow & scale!

iManage is supporting me by...

1. Creating an inclusive environment where I can help shape the culture not just by fitting in, but by adding to it.
2. Providing a market competitive salary that is applied through a consistent process, equitable for all our employees, and regularly reviewed based on industry data.
3. Rewarding me with an annual performance-based bonus.
4. Offering comprehensive Health/Vision/Dental/Life Insurance, and a 401k Retirement Savings Plan with a company match up to 4%.
5. Giving access to HealthJoy, a healthcare concierge service, to help me maximize my health benefits.
6. Granting enhanced leave for expecting parents; 20 weeks 100% paid for primary leave, and 10 weeks 100% paid for secondary leave.
7. Providing me with a flexible time off policy to take the time off that I need. Be it for vacation, volunteering, celebrating holidays, spending time with family, or simply taking time to recharge and reset.
8. Caring for my mental health and well-being with multiple company wellness days and free access to the Healthy Minds app for mindfulness, meditation and more.

About iManage…

iManage is dedicated to Making Knowledge WorkTM. Over one million professionals across 65+ countries rely on our intelligent, cloud-enabled, secure knowledge work platform to uncover and activate the knowledge that exists inside their business content and communications.

We are continuously innovating to solve the most complex professional challenges and enable better business outcomes; Our work is not always easy but it is ambitious and rewarding.

So we’re looking for people who love a challenge. People who are happiest when they’re solving problems and collaborating with the industry’s best and brightest. That’s the iManage way. It’s how we do things that might appear impossible. How we develop our employees’ strengths and unlock their potential. How we find meaning in everything we do.

Whoever you are, whatever you do, however you work. Make it mean something at iManage.

iManage provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Learn more at:

Please see our privacy statement for more information on how we handle your personal data:

#LI-LM1
#LI-Hybrid