Trek is an awesome place to work, with amazing benefits for all employees. We build only products we love, provide incredible hospitality to our customers, and change the world by getting more people on bikes. When you’re on our team, you’re taken care of, encouraged to learn and grow, and given lots of opportunities to do so. Give us your best, and we’ll give it right back. Sound pretty sweet? Then come join us!
IT Security Operations Analyst
Position Summary:
Help us secure the Awesome Bus! We are looking for someone to join our global cybersecurity team. We are a highly effective team that works to protect and defend against intrusions into Trek’s systems.
The candidate must be self-motivated with in-depth technical IT skills and a clear understanding of how changes impact enterprise IT systems worldwide. The individual needs to have a solid understanding of how a variety of information technologies work and how to gather information on and troubleshoot them.
If you enjoy being a first responder to events and incidents; implementing, running, tuning, and troubleshooting platforms and tools; and continually improving your security skillset, this position will provide you with a unique and challenging opportunity to defend Trek against an increasingly sophisticated threat landscape. Travel is at a minimum but since this is a global company, some travel may be required.
Responsibilities:
Tuning, running, and improving technologies and configurations across all security domains to inform cyber risk decisions
Identifying events of interest and investigating them for signs of abuse or misuse
Relentlessly resolving security issues by gathering and analyzing event information and conducting root-cause analysis
Supplying technical guidance, leadership, and assistance to other teams
Creating, communicating, and maintaining incident documentation, reports, and playbooks
Orchestrating and automating work
Evangelizing information security within Trek worldwide
Other duties as assigned
Requirements:
At least five years’ experience in IT systems administration/engineering, network administration/engineering, and/or DevOps
At least two years’ experience in information security, including but not limited to incident response, vulnerability assessment, and alerting/monitoring
Strong understanding of cloud technologies up and down the stack
Strong understanding of Windows and *nix systems as well as network architecture and protocols, including TCP/IP, DNS, and HTTPS.
Experience with anti-malware/XDR/advanced threat detection (Windows Defender, CrowdStrike Falcon, SentinelOne), network monitoring (Zscaler, Palo
Alto Networks, Cisco Meraki, Suricata
, Bro), identity service providers (Microsoft Entra ID), and log analysis tools (Splunk, Microsoft Sentinel, Graylog, ELK)
Ability to troubleshoot
Ability to communicate proficiently with technical and non-technical people around the world
Become SANS GIAC certified within six months or hold a current and valid certification in any of the following: (ISC)2: CISSP, CCSP, SSCP, CAP; SANS GIAC: GCIH, GREM, GCIA, GCFA, GCFE, GPEN, GCED; CompTIA: Security+; EC Council: CEH; other IT certifications considered.
Preferred:
Experience using Splunk
Experience building solutions in Python, PowerShell, zsh, and bash
Bachelors' degree in Computer Science, Electrical/Computer Engineering, Information Security, Management Information Systems, or equivalent experience
If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!