CSOC Engineer Threat Detection Specialist

<div class="content-intro"><p>Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. Fastly’s customers include many of the world’s most prominent companies, including GitHub, Yelp, Paramount, and JetBlue.</p> <p>We're building a more trustworthy Internet. Come join us.</p></div><h1><strong><strong>CSOC Engineer - Threat Detection Specialist</strong></strong></h1> <p>Leveraging our growing security product suite, CSOC Engineers contribute real world security insights to Fastly and our customers as we address Internet-scale threats. CSOC Engineers function as the primary escalation point for SOC Analysts in a globally distributed team. A core responsibility and key performance metric for this role is the effective training and mentoring of our SOC analysts, reducing escalations to the Senior CSOC-engineering level so you can focus on process improvements, data analysis, and security tooling to continue advancing our products, services, and capabilities.</p> <p>The CSOC team works with our internal platform security and security research, engineering and development teams as well operations and customer organisations internally to deliver support solutions for security threats faced on the Internet today.</p> <h3><strong>What You'll Do:</strong></h3> <p>You will be responsible for escalations around monitoring and analysing customer activity, like identifying layer 3/4 DDoS attacks, account-takeover, bot attacks and other malicious web traffic. In addition, as part of CSOC engineering, you will be involved in designing, building and supporting tooling for our analysts.&nbsp; You will have the opportunity to work on some of the world’s most scalable distributed systems,, as well as working with the world-class engineers who developed these systems.</p> <ul> <li><em>Experience configuring traffic policing, shaping&nbsp; to throttle malicious traffic</em></li> <li><em>Identify and mitigate UDP Floods, ICMP Floods, and Reflection/Amplification attacks</em></li> <li><em>Identify and mitigate TCP SYN Floods, ACK Floods, RST Floods, and TCP state exhaustion attacks</em></li> <li><em>Requirements gathering and development of Security Monitoring Systems and troubleshooting tools</em></li> <li><em>Be an expert in ensuring security for customers, providing an outstanding response to security issues</em></li> <li><em>Provide deep application-security experience on escalated cases from customers &amp; automated systems.</em></li> <li><em>Carry out continuous-improvement work &amp; research to drive our customer security products &amp; operations to be the best they can be. </em></li> <li><em>Contribute to the processes and policies that scale our organisation as we grow</em></li> <li><em>Create, test, and deploy security content (e.g. WAF rules) in response to CVEs and other emerging threats</em></li> <li><em>Provide guidance, mentoring, and training for new Security and Customer Support Engineers</em></li> <li><em>Create &amp; review reporting for customers on security services</em></li> <li><em>Troubleshoot and resolve issues related to Kubernetes deployments and management</em></li> <li><em>Provide support for next-generation web application firewalls, including troubleshooting and performance optimization</em></li> <li><em>Actively participate in sprint planning, deliver committed tasks on time with quality code, collaborate with team members, communicate blockers, and contribute to continuous improvement.</em></li> <li><em>Manage CSOC tool-related escalations and troubleshooting</em></li> </ul> <h3><strong>What We're Looking For:&nbsp;</strong></h3> <ul> <li style="font-style: italic;"><em>At least 3+ years of related experience in Network Security, Network Engineering or Network Support type roles, ideally with a background in CDNs, Cloud, and/or internet infrastructure products.</em></li> <li><em>Understanding stateless communication, fragmentation, and amplification vectors (DNS, NTP, CLDAP, SSDP)</em>&