At a glance
- Location
- Mexico City · Flex - Mexico
About the role
- Lyft is looking for Security Analysts to help scale its rapidly growing engineering team and protect infrastructure and services from cyber attacks.
- The role involves refining feedback loops, executing proactive security actions, and collaborating closely with Senior Analysts to grow technical expertise.
Responsibilities
- Respond promptly to security incidents by orchestrating coordinated responses across engineering teams and other relevant disciplines.
- Assess and prioritize security alerts of high quality with the potential to impact the organization, based on SOCLess approach.
- Create and maintain automation tools to enhance the efficiency and impact of the incident response team's activities.
- Work closely with the Detection Engineering Team to identify and implement new security strategies aimed at detecting threats, reducing the attack surface, and enhancing the organization's overall cybersecurity posture.
- Define and execute threat hunting operations across the organization's systems and services, aiming to uncover detection gaps, identify weaknesses in security controls, and refine existing processes.
- Evaluate the threat landscape specific to the organization to prioritize proactive security measures and actions.
- Establish and nurture relationships with critical partners both within the organization and externally to foster collaboration and information sharing.
Requirements
- A strong drive to learn and ambition for continuous growth within the cybersecurity domain.
- An understanding of cybersecurity principles, including threat landscape and security best practices.
- Familiarity with TTPs (tactics, techniques and procedures), anomaly detection, and behavior analysis.
- Scripting and automation skills, basic experience with cloud technologies such as AWS/GCP and their tech stack.
- Strong understanding of operating systems (Windows, Linux, macOS) and networking, including their security features.
- A natural curiosity to find the 'root cause' of problems through log analysis and forensic trail-following.
- Ability to aggregate and correlate datasets to identify suspicious patterns and outliers.
- Proficiency in leveraging AI tools to accelerate workflows, such as scripting, automating repetitive tasks or summarizing complex technical documentation.
- Strong communication skills to collaborate effectively with other team members, stakeholders, and management.
- A strong ethical foundation and commitment to handling sensitive data and incidents with integrity and discretion.
Skills
- AWS
- GCP
- Windows
- Linux
- macOS