Security Analyst - Triage

California, United States

Full-time

Remote

$90K/yr - $156K/yr

Entry, Mid Level

Autodesk develops 3D design software for use in various industries. The Triage Analyst is responsible for monitoring and responding to information security events, analyzing incidents, and collaborating with teams to improve security processes.

Apply Now

Responsibilities

Monitor alerts and events from EDR, SIEM, network, and cloud security tools
Detect anomalies across endpoints, networks, and application logs
Conduct initial analysis of firewall, proxy, and Active Directory logs
Execute containment actions per playbooks and escalate complex issues
Document incident details and remediation steps in the case management system
Create and maintain process documentation and runbooks
Partner with engineering and detection teams to refine alert rules and workflows
Communicate findings clearly to stakeholders in written reports and briefings
Assist in SOAR platform enhancements and playbook updates
Participate in post‑incident reviews and identify opportunities for process optimization
Track triage metrics and contribute to the monthly business review
Operate in a 24/7 environment including nights, weekends, and holidays as needed
Participate in the On-Call rotation
Maintain a high level of confidentiality and integrity throughout all activities

Qualification

Required

BS in Computer Science, Information Security, or equivalent professional experience
2+ years of cyber security experience in incident response
Technical depth in one or more specialties including: Malware analysis, Host analysis and Digital forensics
Strong understanding of Security Operations and Incident Response process and practices
Experience performing security monitoring, response capabilities, log analysis and forensic tools
Strong understanding of operating systems including Windows, Linux and OSX
Experience with SIEM, SOAR, EDR, Network, AWS, and Azure security tools
Excellent critical thinking and analytical skills, organizational skills, and the ability to work as part of a team
Excellent verbal and written communication skills
Ability to design playbooks for responding to security incidents
Ability to support off-hours, weekends, and holidays if needed in support of incident response

Preferred

Advanced interpersonal skills to effectively promote ideas and collaboration at various levels of the organization
One or more security-related certifications from any of the following organizations: GCIH, GCFE, GCFA, AWS, Azure Cloud security Certifications or equivalent is desired