Serve as the technical escalation point and mentor for lower-level analysts.
Professionally manage interactions with internal stakeholders.
Drive the remediation efforts for security incidents.
Develop metrics and reports in support of Security Operations Leadership.
Document and communicate findings and after-action reports.
Contribute to the continuous improvement of monitoring and alerting.
Generate reports and create documentation to drive automation
What You'll Bring
Ideally strong experience across security/IT technologies including SIEM, IDS/IPS, firewalls, antivirus, EDR, and application security (SAST/SCA)
Hands-on experience with Splunk or similar log/SIEM platforms, including log analysis across multiple sources
Strong understanding of threats, vulnerabilities, exploits, and attacks across networks, endpoints, web applications, and APIs
Solid knowledge of networking protocols and services (e.g. HTTP, FTP, SSH, SMB, LDAP) and security tooling
Experience with cloud environments (AWS, Azure, Microsoft 365) and modern SaaS infrastructure
Proven ability to perform root cause analysis, solve complex problems, and quickly learn new technologies independently
Scripting and technical capability across Python, PowerShell, Bash (or similar), plus Regex, with ability to operate in high-pressure, multi-priority environments
Purple Perks
Medical, dental and vision coverage
Generous PTO and observed holidays
2 Paid VoluNteer Days per year
Employee Stock Purchase Program
FuN-raising opportunities as part of our giving program
N-ablite Learning – custom learning experience as part of our investment in you
The Way We Work – our hybrid working model based on trust and flexibility
About N-able
At N-able, our mission is to protect businesses against evolving cyberthreats with an end-to-end cyber resilience platform to manage, secure, and recover. Our scalable technology infrastructure includes AI-powered capabilities, market-leading third-party integrations, and the flexibility to employ technologies of choice—to transform workflows and deliver critical security outcomes. Our partner-first approach combines our products with experts, training, and peer-led events that empower our customers to be secure, resilient, and successful.
#LI-KP1
#LI-Hybrid
First responder, responsible for identifying, monitoring, investigating, and analyzing computer network intrusions.
Perform analysis for security events as detected by various cloud, host, and network-based tools.
Serve as the technical escalation point and mentor for lower-level analysts.
Professionally manage interactions with internal stakeholders.
Drive the remediation efforts for security incidents.
Develop metrics and reports in support of Security Operations Leadership.
Document and communicate findings and after-action reports.
Contribute to the continuous improvement of monitoring and alerting.
Generate reports and create documentation to drive automation
Ideally strong experience across security/IT technologies including SIEM, IDS/IPS, firewalls, antivirus, EDR, and application security (SAST/SCA)
Hands-on experience with Splunk or similar log/SIEM platforms, including log analysis across multiple sources
Strong understanding of threats, vulnerabilities, exploits, and attacks across networks, endpoints, web applications, and APIs
Solid knowledge of networking protocols and services (e.g. HTTP, FTP, SSH, SMB, LDAP) and security tooling
Experience with cloud environments (AWS, Azure, Microsoft 365) and modern SaaS infrastructure
Proven ability to perform root cause analysis, solve complex problems, and quickly learn new technologies independently
Scripting and technical capability across Python, PowerShell, Bash (or similar), plus Regex, with ability to operate in high-pressure, multi-priority environments
