Senior Security Analyst, Triage

Job Requisition ID #

25WD89892

Position Overview

Autodesk's mission is to empower everyone, everywhere to design and make anything. We secure it.

Autodesk's Security Incident Response department is growing, building a senior team of security analysts in the United States. They participate in a broader security organization, geographically load balanced across the US, EMEA, and India, and lead security investigations across our expansive global footprint.

At Autodesk, you'll be joining a dynamic, tech-savvy team where your expertise in incident response is not only valued, it's essential. Our Security Incident Response team is a force multiplier that combines deep technical acuity with creative problem-solving in an environment that rewards innovation and precision. If you're passionate about leveraging Splunk to transform complex, multilayered data into actionable intelligence, then Autodesk is the place for you to lead, collaborate, and evolve your career.

As a Security Analyst, you will be an essential contributor in our incident response team. In this role, you will harness your strong Splunk expertise to monitor, analyze, and investigate security incidents across multiple data sources. Your role is pivotal in maintaining our security posture and ensuring rapid, effective response to emerging threats, while you continuously refine your technical skills and knowledge through day-to-day operations.

Responsibilities

• Monitoring & Triage: Actively monitor security dashboards and alerts using Splunk to detect suspicious activities and potential incidents
• Incident Investigation: Perform in-depth analyses of security events, leveraging Splunk to aggregate and correlate data from various telemetry sources to identify IOCs
• Support & Collaboration: Assist in coordinated incident response efforts during high-stakes investigations
• Documentation & Reporting: Maintain clear, detailed incident reports and contribute to the creation and refinement of technical playbooks and standard operating procedures
• Continuous Learning: Stay abreast of industry trends, emerging threat techniques, and best practices in incident response and cybersecurity
• Cloud Agnostic: Ensure effective incident analysis within cloud-agnostic environments involving Azure, AWS, and GCP

• Experience: 2-4 years of experience in security operations or incident response, with demonstrable proficiency in conducting investigations
• Technical Skills: Strong command of Splunk for log analysis, data correlation, and building dashboards across multiple sources
• Foundational Expertise: Solid understanding of incident response processes and familiarity with telemetry, SIEM/SOAR integration, and cloud environments
• Soft Skills: Excellent communication and collaborative skills; ability to work effectively in a fast-paced, dynamic environment
• Cloud Agnostic: Exposure to security practices across various cloud platforms including Azure, AWS, and GCP