NDR Security Analyst (India Position)

Overview

We are seeking skilled and motivated security analysts to join the Arista Managed Network Detection and Response (MNDR) team. The successful candidate(s) will play a critical role in our 24/7 security operations, leveraging a suite of security tools including our core NDR platform, to protect customer environments.

Additionally, this candidate(s) will support the Deployment and Integration (D&I) Services Team, helping customers optimize their security posture, plan configurations, and operationalize Arista's NDR solution.

Key Responsibilities

• Case Management: Efficiently manage and document security cases within Arista s ticketing systems.
• D&I Collaboration: Participate in project kickoff phases to review pre-engagement checklists, project goals, milestones, and unique customer environment information.
• Continuous Improvement: Contribute to the continuous improvement of security operations processes, platform tuning, and technical skills.
• Team Collaboration: Maintain open communication and collaboration with other security team members.

Security Analyst

The Analyst serves as a critical bridge, providing expert assistance, advanced deployment leadership, and proactive threat hunting capabilities.

• In-Depth Investigation & Threat Hunting: Conduct in-depth investigations and proactive threat hunting within the NDR platform, as well as other security solutions (EDR, SIEM, etc.).
• Advanced D&I Execution: Lead the enablement and operationalization phases by reviewing system descriptions, platform constraints, and operational designs (such as network communication ports and data flows).
• Configuration & Onboarding: Configure Arista NDR Nucleus and Sensors, identify/collect network settings, validate appliance cloud connectivity, and assist with configuring third-party integrations (EDR, orchestration, and ticketing systems).
• Knowledge Transfer: Deliver interactive, basic, and advanced knowledge transfer sessions to customers covering threat hunting, network forensics, incident response, and skill/adversarial model development.
• Tier 1 Support & Oversight: Support T1 analysts with complex cases, provide mentorship, and review/approve all High and Critical cases and tuning adjustments.
• Case Load & Prioritization: Closely monitor case queues, prioritizing Arista-related cases for timely resolution. Maintain situational awareness of overall case load and surge resources as needed.

Qualifications (General)

• Experience: Demonstrated experience in a Security Operations Center (SOC) environment, with a strong background in network forensics, threat intelligence, or large-scale security technology deployments.
• Technical Skillset: Familiarity with network communication ports, data flow design, SIEM logging configuration, backup/recovery best practices, and adversarial modeling language-based threat hunting.
• Agility: Ability to work effectively in a dynamic, fast-paced environment and manage phased project methodologies under varying customer timelines.
• Certifications: Relevant certification (e.g., CompTIA Security+, CEH, GIAC certifications) is a plus.