Junior Security Analyst

About the role

Credo is seeking a Junior Security Analyst to join our growing Information Security Team. In this role, you will serve as a first-line defender of Credo's infrastructure, systems, and data by monitoring security events, investigating alerts, and supporting incident response activities.

This is an excellent opportunity for a security professional who is early in their career and eager to develop hands-on skills in a fast-paced, technology-driven environment. You will work alongside experienced security engineers and analysts to detect threats, analyze vulnerabilities, and help maintain a strong security posture across the organization.

Base salary range is $80,000 - $120,000 a year. The base salary offer will depend on factors such as education, experience, training, skills, qualifications, and location. This position is also eligible for a discretionary bonus, equity and a full range of medical and other benefits.

Why Credo

• Purpose: We invest in what matters. From meaningful-future shaping projects to competitive compensation, we empower you to grow your career while making a lasting impact.
• People: Connection starts within. We collaborate, celebrate wins, and create an environment where everyone can do their best work.
• Possibilities: Our belief shapes what's next. Our technology powers the most reliable and energy-efficient connections around the world - and our team powers new products and markets that come next.

Responsibilities

• Monitor and investigate security events across SIEM, EDR, IDS/IPS, and related platforms, performing triage, root‑cause analysis, and escalation as needed.
• Support incident response by analyzing alerts, containing threats (malware, phishing, unauthorized access), and documenting findings.
• Conduct vulnerability management through regular scanning, analysis, and tracking of remediation efforts.
• Analyze logs and network activity from firewalls, proxies, AD, cloud services, and endpoints to identify suspicious behavior.
• Enhance detection capabilities by tuning SIEM rules, correlation logic, and alert thresholds to improve fidelity.
• Produce clear reporting including incident summaries, dashboards, and documentation for audits and compliance.
• Collaborate with IT and engineering to coordinate remediation and share security guidance.
• Maintain security documentation such as runbooks, SOPs, and knowledge base articles while staying current on emerging threats.

Qualifications

Basic Qualifications

• 1-3 years of security or IT operations experience including internships or co‑ops, with exposure to SIEM platforms, vulnerability assessment tools, and EDR technologies.
• Incident response familiarity including alert triage, containment, eradication, and post‑incident documentation, supported by use of ticketing/case‑management systems.
• Scripting proficiency in Python, PowerShell, or Bash for automation, log parsing, or detection development.
• Operating system expertise across Windows (AD, GPO, Event Logs, registry) and Linux/Unix (permissions, logs, processes, CLI tools).
• Networking fundamentals including TCP/IP, DNS, DHCP, HTTP/S, SMTP, SSH, RDP, plus familiarity with routing (BGP, MPLS), VLANs, firewalls, and segmentation.
• Web application security knowledge including OWASP Top 10, SQLi, XSS, and authentication weaknesses.
• Basic digital forensics capability including memory/disk artifact analysis during investigations.
• Threat intelligence literacy including interpreting IOCs, CVEs, and feeds such as VirusTotal or AbuseIPDB.
• Strong communication and documentation with the ability to produce clear incident reports and manage multiple priorities effectively.
• CompTIA Security+ required or in progress.

Preferred Qualifications

• Security tooling experience across SIEM (Splunk, Sentinel, QRadar), EDR (CrowdStrike, Defender XDR, SentinelOne), and vulnerability scanners (Nessus, Qualys, Rapid7).
• Threat intelligence and network analysis using platforms like Recorded Future, MISP, VirusTotal, and tools such as Wireshark, Zeek, Suricata, or Snort.
• Automation and cloud monitoring including SOAR (XSOAR, Splunk SOAR) and cloud security tools across AWS, Azure, or GCP.
• Identity, forensics, and PKI with exposure to IAM/PAM, digital forensics tools (Autopsy, FTK, Volatility), and certificate lifecycle management.
• Modern infrastructure security including container and Kubernetes security awareness.
• Preferred certifications such as CySA+, Network+, CEH, SC‑200, GSEC, or Splunk certifications.

About Credo

Credo's mission is to transform connectivity at scale through fast, reliable, and energy-efficient system solutions. Our high-speed copper and optical interconnect products deliver industry-leading power and performance at up to 1.6T to meet the ever-expanding data infrastructure demands of AI.

Our product portfolio includes ZeroFlap (ZF) Active Electrical Cables (AECs) and ZF optical transceivers, OmniConnect memory solutions, and a suite of retimers and DSPs for optical and copper Ethernet and PCIe, all leveraging the PILOT diagnostic and analytics software platform. Credo innovations enable our customers to connect the systems that connect the world.

Credo is committed to creating an inclusive environment for all employees and welcome applicants from diverse backgrounds without regard to race, color, religion, gender, sex, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis. If you have a disability or special need that requires accommodation to navigate our website or complete the application process, email people@credosemi.com. Apply Now