Information Security Analyst (Third Shift)

Here at Appian, we’re passionate about technology. We love making it, and we love using it. Joining Appian CIO will provide you with the opportunity to learn in an environment that values cross-functional collaboration and is committed to personal and professional growth. We want to revolutionize the way people work, and in doing so, we develop the Appian platform to be simple so our customers can thrive.

The Appian Information Security department continuously evaluates the threat-landscape for Appian operations and service offerings. As an Information Security Analyst on our Security Operations team, you will participate in monitoring and analyzing security alerts, evaluating emerging threats, responding to cyber threats and adhering to industry regulations.

Available to work between 2pm-10pm EST Sunday through Thursday or equivalent hours in a fully remote capacity.

To be successful in this role, you need:

• To assist with information security related continuous monitoring activities, including monitoring for continued compliance with internal security controls, policies, regulations, and laws

• To collaborate with interdepartmental teams to help detect unique threats and mitigations

• To support internal and external security reviews, audits, and control evaluations

• To participate in the incident reporting and investigation processes

• To help conduct risk analysis and provide recommendations for remediation or mitigation

• To support information security projects

• To coordinate with Appian Engineering teams to research potential security issues

• To participate in blue-team activities. And sometimes red-team!

• To be passionate about staying up to date on current security risks and trends

• To have excellent written and oral communication skills

• To have the ability to manage multiple tasks efficiently

Basic Qualifications:

• Excellent communication skills, including the ability to effectively communicate in English both verbally and in writing

• Bachelor’s degree in related field of study

• Solid understanding of network fundamentals and internet protocols (TCP/IP networking and network services DNS, DHCP, etc.)

• Proficiency in at least one scripting language (Python preferred)

• Proficient in querying large datasets using SQL or other big data query languages such as KQL, Splunk Query Language (SPL), etc

• Solid understanding of operating systems concepts (Hardening, Log monitoring, and difference between Operating Systems)

• Knowledge of the MITRE ATT&CK Framework, Cyber Kill Chain or other relevant network defense and intelligence frameworks

• Familiarity with threat intelligence sources, common adversary tactics, techniques, and procedures (TTPs)

• Knowledge of cloud-based infrastructures (SaaS, PaaS, IaaS) and layer security responsibilities

• Knowledge of cloud concepts (AWS), containers, kubernetes, and DevSecOps principles

Nice to Have:

• Demonstrated experience identifying and communicating information security concepts and risks to an audience

• Experience with EDR and SIEM platforms

• Experience automating security processes, detections, or investigations to enhance efficiency and threat response

• Relevant information security certifications, such as GCIH, AWS Security, or other SANS certifications.