About the Team
The Roku trust engineering team is a close knit group of professionals with a passion for information security. Our mission is to protect our customers, partners, devices, services, infrastructure, and data. We work collaboratively, sharing insights and expertise to stay ahead of the curve.
About The Role
As a SOC Analyst in the Trust engineering team, you will support the design, implementation and management of Roku’s end-to-end security systems and controls impacting a global user base.
What You Will Be Doing
* Trust Information Security Operations
* Supporting the design and implementation of information security systems and frameworks including threat prevention, detection and mitigation tools.
* Managing, maintaining and optimizing security information and event management (SIEM) platforms and associated security infrastructure.
* Detecting and responding to information security incidents, investigating security incidents, identifying attack vectors, and leading containment/eradication/recovery efforts. Creating detailed incident reports, leading post-incident reviews, documenting lessons learned, and contributing to compliance reporting.
* Threat hunting & proactive measures: hunting for undetected threats, tuning security tools, refining detection rules, and addressing false positives.
* Vulnerability management, analysis, overseeing the vulnerability management lifecycle and reporting, supporting prioritization and advising relevant stakeholders on vulnerability status and postures.
* Security controls, identifying risks in new and existing projects and environments and supporting the implementation of necessary security controls to meet business needs.
* Supporting the implementation of security orchestration, automation and response (SOAR) playbooks and procedures to improve response times and ensure a consistent approach to incidents.
* Providing mentorship and support to more junior analysts, acting as an escalation point for complex issues.
* Testing and evaluating security products and solutions.
* Supporting the development and management of the security operations centre (SOC) function as it is built up and developed into the future.
* Raising awareness of security policies and best practices across the organisation, and continuing to contribute to ongoing development of best practices, procedures and security training across the organisation.
We Are Excited If You Have
* Strong understanding of SIEM, EDR, cloud security services (e.g., AWS GuardDuty), and various security technologies.
* Experience in automation and development of automated playbooks and associated processes in security orchestration, automation and response (SOAR) environments.
* Experience in the creation of incident response plans and leading incident response efforts and post‑incident reporting.
* Threat intelligence knowledge of tactics, techniques, procedures (TTPs) employed by threat actors and how to generate and deploy mitigation strategies.
* Vulnerability management, monitoring, reporting and engagement with necessary stakeholders to ensure timely remediation.
* Strong understanding of network security principles and encryption technologies.
* Experience with security change management processes and procedures.
* Experience in risk assessment and advisory capabilities on internal systems and products/solutions from third‑party vendors (SaaS, AI, etc.).
* Experience in contributing to the development, implementation and management of security policies and procedures.
* Strong knowledge of security frameworks and industry best practices – such as ISO 27001, NIST, PCI‑DSS and others.
* Strong analytical and problem‑solving capabilities.
* Effective communication and collaborative skills to work across diverse cross‑functional teams including development, IT, Legal, Governance and Risk.
Our Hybrid Work Approach
Roku fosters an inclusive and collaborative environment where teams work in the office Monday through Thursday. Fridays are flexible for remote work except for employees whose roles are required to be in the office five days a week or employees in offices with a five‑day in‑office policy.
Benefits
Roku offers a diverse range of benefits as part of our compensation package to support employees and their families. Our comprehensive benefits include global access to mental health and financial wellness support and resources. Local benefits may include statutory and voluntary benefits such as healthcare (medical, dental, and vision), life, accident, disability, commuter, and retirement options (401(k)/pension). Employees can take time off work for vacation and other personal reasons to balance evolving work and life needs. Not every benefit is available in all locations or for every role. For details specific to your location, please consult with your recruiter.
Accommodations
Roku welcomes applicants of all backgrounds and provides reasonable accommodations and adjustments in accordance with applicable law. If you require reasonable accommodation at any point in the hiring process, please direct your inquiries to EmployeeRelations@Roku.com.
#J-18808-Ljbffr