S'INSCRIRE

Offres d'emploi

Trouvez des postes près de chez vous, sur site, hybrides ou à distance.
  • Emplois similaires à : Product Security Analyst III New
XX
Product Security Analyst III NewExtraHop Networks • Seattle, Washington, United States
Postuler Maintenant
XX

Product Security Analyst III New

ExtraHop Networks
  • US
    Seattle, Washington, United States
  • US
    Seattle, Washington, United States
Postuler Maintenant

À propos

Position Summary By joining ExtraHop as a Product Security Analyst, you’ll directly contribute to strengthening the security and compliance posture of ExtraHop’s market‑leading products. Collaborate with top‑tier professionals to innovate and uphold the highest standards in cloud security.
You will play a key role in establishing, maintaining and enhancing our compliance with FedRAMP, SOC 2, ISO 27001 and other security and regulatory frameworks. Your expertise will ensure that security controls, monitoring processes, vulnerability management, and risk mitigation strategies meet rigorous standards. Collaborating across teams, you will drive initiatives related to system security planning, vulnerability management and continuous monitoring while supporting audits and responding to compliance requirements.
Key Responsibilities
Run FedRAMP Continuous Monitoring (ConMon) processes and ensure successful monthly reviews with ExtraHop and agency stakeholders; manage asset inventory, vulnerability scan findings, and the Plan of Action & Milestones (POA&M) document
Manage vulnerability detection and response pipelines, including tools, reporting and tracking
Lead the vulnerability management lifecycle: triage, reporting, coordination with system owners, and remediation tracking
Develop and provide vulnerability findings and responses for internal and external stakeholders, including customers
Collaborate with the Director of Product Security to handle customer and pre‑sales security inquiries
Assist in addressing compliance requirements for various standards (e.g., CSASTAR, ISO 27001, DoDINAPL, NIAP, FIPS, CMMC, IL4), supporting gap assessments and facilitating audits (including coordinating evidence collection and submission)
Develop a product security compliance roadmap and coordinate key activities across the organization to achieve milestones
Collaborate with Product Security team members to develop and improve standards, policies, procedures, documentation, and training
Work with security information & event management (SIEM) tooling and other systems to perform security investigations
Perform and/or lead security incident response activities
Participate in an on‑call rotation with occasional after‑hours paging to review carefully prioritized security detections
Required Qualifications
5+ years of experience in cybersecurity, with a focus on compliance frameworks like FedRAMP, SOC 2, or similar
2+ years of which should be hands‑on experience specifically managing compliance programs, security assessments, or cloud security initiatives
Bachelor’s degree in a related field such as Cybersecurity, Computer Science, Information Systems, Engineering or other technical field
Direct experience with the FedRAMP compliance framework, including security control requirements, documentation and assessment methodologies
Technical knowledge of web application security and cloud security, including best practices and controls for cloud‑based environments
Proficient with security tools, including vulnerability scanners, ticketing systems (e.g., Jira), compliance reporting platforms, and SIEM tools
Exceptional analytical skills to effectively manage and resolve security and compliance issues
Proven ability to communicate complex security concepts to technical and non‑technical audiences
All R&D Employees will be required to attend 2 mandatory in‑person events every year, typically held in our offices in downtown Seattle and running 4‑5 days each
Must be a U.S. citizen or national, U.S. permanent resident (current Green Card holder) or lawfully admitted into the U.S. as a refugee or granted asylum
Preferred Qualifications
Experience supporting certifications like SOC 2, ISO 27001; familiarity with additional federal or industry security frameworks (e.g., CMMC, IL4, DoDINAPL, NIAP, FIPS)
Strong project management skills with the ability to balance compliance initiatives and security operations
Experience working in a security operations center (SOC) and/or leading security incident response activities
Relevant security certifications such as CISSP, CISA, or CISM are preferred
Salary and Benefits The salary range for this role is $135,000 - $149,000 + bonus + benefits.
Benefits
Health, Dental, and Vision Benefits
Flexible PTO, Sick Time prorated based on date of hire, and all federal holidays (U.S. only) + 3 days of paid volunteer time
Non‑commissioned positions may be eligible to participate in the Annual Discretionary Bonus Plan
FSA and Dependent Care accounts + EAP, where applicable
Educational Reimbursement
401(k) with employer match or pension, where applicable
Pet Insurance (U.S. only)
Parental Leave (U.S. only)
Hybrid and remote work model
#J-18808-Ljbffr
  • Seattle, Washington, United States

Compétences linguistiques

  • English
Avis aux utilisateurs

Cette offre provient d’une plateforme partenaire de TieTalent. Cliquez sur « Postuler maintenant » pour soumettre votre candidature directement sur leur site.

10'000+ offres d'emploi : Trouvez des postes près de chez vous, sur site, hybrides ou à distance