Cybersecurity Analyst Security Operations Center

Base Pay Range: $83,800.00 – $142,500.00 Annually

Primary Location: USA-MI-Ann Arbor-KLA

KLAs total rewards package for employees may also include participation in performance incentive programs and eligibility for additional benefits identified below. Interns are eligible for some of the benefits identified below. Our pay ranges are determined by role, level, and location. The range displayed above reflects the minimum and maximum pay for this position in the primary location identified in this posting.  Actual pay depends on several factors, including location, job-related skills, experience, and relevant education level or training.  If applicable, your recruiter can share more about the specific pay range for your preferred location during the hiring process.

Company OverviewKLA is a global leader in diversified electronics for the semiconductor manufacturing ecosystem. Virtually every electronic device in the world is produced using our technologies. No laptop, smartphone, wearable device, voice-controlled gadget, flexible screen, VR device or smart car would have made it into your hands without us. KLA invents systems and solutions for the manufacturing of wafers and reticles, integrated circuits, packaging, printed circuit boards and flat panel displays.  The innovative ideas and devices that are advancing humanity all begin with inspiration, research and development. KLA focuses more than average on innovation and we invest 15% of sales back into R&D. Our expert teams of physicists, engineers, data scientists and problem-solvers work together with the worlds leading technology providers to accelerate the delivery of tomorrows electronic devices. Life here is exciting and our teams thrive on tackling really hard problems. There is never a dull moment with us.

Job Description/Preferred Qualifications
The Cybersecurity group at KLA is involved in every aspect of the global business. The KLA Cybersecurity group defends against cyber-attacks and provides cybersecurity tools, incident response services and assessment capabilities to safeguard the environments that support the essential operations of KLA. We are passionate about identifying adversarial activities and anticipating a wide variety of threats to strengthen our defenses and the overall protection of KLA Intellectual Property.

The Cybersecurity Analyst-SOC is responsible for advanced incident response, threat hunting, and maintaining the security tools that are used to secure our environment. This individual will have a specific focus on Incident Response, tuning detection rule-sets, and generating and responding to tickets across relevant IT and Cybersecurity teams.

Essential Duties and Responsibilities

Act as an active member of the team, which monitors and process responses for security events on a 24×7 basis to include serving in a rotational on-call capacity

IDS monitoring and analysis, analyze network traffic, log analysis, prioritize and differentiate between potential intrusion attempts and false alarms

Proactively monitor SIEM, EDR, and network based alerts, and respond to active threats to internal networks

Advise incident responders in the steps to take to investigate and resolve computer security incidents

Actively preform detection, monitoring, analysis, and resolution of security incidents

Plan and implement regular incident response and postmortem exercises, with a focus on crafting measurable benchmarks to show progress (or deficiencies requiring additional attention).

Review and analyze cyber threats and provide SME support and training to junior level security analysts.

Transform threat intelligence into effective detection logic and new signatures for integration with SIEM and EDR platforms.

Evaluate existing detection rules and facilitate the development and tuning of AV, EDR, and SIEM rules to ensure high fidelity alerting.