About the company
Asana is a leading platform for human + AI collaboration. The security team protects Asana's employees, users, and customers by proactively addressing threats and fostering a culture of security throughout our product and operations.
Responsibilities
- Lead security incident detection, analysis, and response efforts, ensuring timely and effective remediation of security incidents.
- Utilize and optimize security tools such as Panther for SIEM, CrowdStrike for endpoint detection and response, and other security platforms.
- Develop, implement, and maintain security playbooks and automation scripts to streamline security operations and reduce manual toil.
- Monitor security alerts and threat intelligence feeds, proactively identifying and addressing emerging threats.
- Conduct forensic analysis during security incidents to understand the scope and impact of incidents.
- Collaborate with engineering teams to integrate security best practices into development processes and provide guidance on secure configurations.
- Develop and deliver training to educate engineers on security operations and incident response best practices.
Requirements
- 5+ years of experience in security operations, incident response, or threat detection.
- Strong experience with SIEM platforms (e.g., Panther, Splunk, Elastic Security) for log analysis, alert correlation, and dashboard creation.
- Deep working knowledge of endpoint detection and response (EDR) tools (e.g., CrowdStrike, SentinelOne) and their capabilities.
- Proven experience developing and implementing security automation using scripting languages (e.g., Python, PowerShell) or orchestration tools.
- Experience performing security incident investigations and forensic analysis.
- Familiarity with common attack techniques, tactics, and procedures (TTPs) and frameworks like MITRE ATT&CK.
- Strong communication skills for collaborating effectively with both technical and non-technical partners.
- A pragmatic and collaborative mindset, with a passion for building robust defenses and enabling other engineers to do their best, most secure work.
- Demonstrates curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making.
Conditions
- Generous, transparent and fair compensation system (base salary and RSUs).
- Contract of Employment (and the option of 50% tax deductible costs for author’s rights usage in respect of applicable roles).
- Health insurance with dental and travel coverage (Lux Med).
- Breakfast and lunch catering on the days that you work from the office.
- Vacation allowance.
- Career growth budget.
- Home office setup budget.
- Gym/Fitness card.
- Fertility healthcare and family-forming support with Carrot.
- Mental Health Support in Modern Health.
- Group life insurance.
- MacBooks with all necessary accessories.