Security Analyst

**Join us on our mission to make a better world of work.**

Culture Amp is the world’s leading employee experience platform, revolutionizing how 25 million employees across more than 6,500 companies create a better world of work. Culture Amp empowers companies of all sizes and industries to transform employee engagement, drive performance management, and develop high-performing teams. Powered by people science and the most comprehensive employee dataset in the world, the most innovative companies including Canva, On, Asana, Dolby, McDonalds and Nasdaq depend on Culture Amp every day.

Culture Amp is backed by leading venture capital funds and has offices in the US, UK, Germany and Australia. Culture Amp has been recognized as one of the world’s top private cloud companies by Forbes and most innovative companies by Fast Company.

**_What is the opportunity for you?_**

Culture Amp is looking for a Security Analyst to join a growing security operations function and participate in event and incident management, and vulnerability management activities. You will have knowledge of investigating cybersecurity events using SIEM, EDR, and traffic analysis tools, and will have an understanding of cybersecurity threats.The Security Analyst will play a major role in Culture Amp’s security operations capability and will be responsible for detecting and quickly responding to a range of cybersecurity threats guided by senior security analysts. As a security analyst you will be mentored by experienced security operations practitioners. This role is a great opportunity to contribute to the security of the Culture Amp platform while gaining more experience in security practices and some of the latest technologies.

**_Your role in the Camp_**
- Monitor and analyse cybersecurity events, trends, and threats
- Investigate cybersecurity incidents and undertake response activities using defined response plans and playbooks
- Support major incident response activities
- Perform vulnerability analysis and provide guidance on remediation activities
- Participate in incident response drills and exercises
- Provide input into the development and continuous improvement of Culture Amp’s security technologies and processes
- Identify and implement opportunities for automation to improve detection and response capabilities
- Respond to queries from employees, and help champion security within the organisation
- Provide regular metrics and reporting on threats, vulnerabilities, and improvement(s)

**_What you’ll bring to Culture Amp_**
- Knowledge of, and some exposure to investigating security incidents and events using SIEM (Splunk preferred)
- Knowledge of, and some exposure to EDR technologies (CrowdStrike preferred)
- Knowledge of vulnerability assessment and management tools and techniques
- Technical knowledge of operating systems, networking, and cloud platforms
- An understanding of common security operations including NIST, ISO27001, Mitre ATT&CK, and/or Cyber Kill chain
- Some exposure to or preparedness to learn to manage data loss prevention (DLP) and/or CASB technologies
- A positive attitude and a passion for security
- Demonstrable micro learning or ongoing self development in security
- Industry recognised security qualifications highly advantageous

We believe that our employees are the heartbeat of our success. We're committed to fostering a work environment that truly cares for and develops its people, and creates lasting positive impact. In addition to providing a competitive compensation package, some of the key benefits we offer are:

- Employee Share Options Program: We empower you to be an owner in Culture Amp and share in our success
- Programs, coaching, and budgets to help you thrive personally and professionally
- Access to external providers for mental wellbeing and coaching support to sustain the wellbeing, safety and development of our people
- Monthly Camper Life Allowance: An automatic allowance paid out each month with your pay - you can spend it however you like to help improve your experience and life outside work
- Team budgets dedicated to team building activities and connection
- Intentional quarterly wellbeing pauses: A quarterly company-wide shutdown day in each region to to collectively pause, reset and focus on restoration and rest, without having to tap into individual vacation time
- Extended year-end breaks: An extended refresh period at the end of year
- Excellent parental leave and in work support program available from day 1 of joining Culture Amp
- 5 Social Impact Days a year to make a positive impact on the community outside of work
- MacBooks for you to do your best & a work from home office budget to spend on setting up your home office
- Medical insurance coverage for you and your family (Available for US & UK only)

Additionally, we don't just focus on our internal community; we believe in creating a better world of work for all. We're committed to diversity, equity, and inclusion, wi