GCDT Analyst

We're Celonis, the global leader in Process Intelligence technology and one of the world's fastest-growing SaaS firms. We believe there is a massive opportunity to unlock productivity by placing AI, data and intelligence at the core of business processes - and for that, we need your help. Care to join us?

This position will be part of the Celonis Global Cyber Defense Team (GCDT) and will cover the North America East Coast time zone. The GCDT is comprised of experienced Incident Response (IR) and Security Operations Center (SOC) personnel who work together closely to keep Celonis safe.

This position is primarily responsible for the monitoring of security events and potential security incidents. This person will respond to security events and incidents in accordance with Celonis policies and procedures. The position will also participate in all pre and post incident activities as outlined in the Celonis Information Security Incident Response Plan.

• Assist in the development of processes and procedures to help improve detection and response capabilities
• Assist with building out SOAR capabilities
• Create and test Celonis Defense Procedures and IR Playbooks
• Create Detection Use Cases
• Document relevant incident information into the case management system, detailing the critical data for each incident to develop a historical record
• Monitor the environment, SIEM, and other internal security tools for compliance violations, anomalous behavior, and potential attacks to respond to possible threats to the organization
• Participate in shift turn over meetings between outgoing and incoming teams globally to pass along critical information and ensure any open cases are effectively transitioned
• Perform initial analysis of all new alerts generated by correlation/alerting tools in addition to other external sources that will feed into the SIEM system and other security monitoring tools
• Participate in on-call rotation

• Soft Skills
  • Analysis / Reasoning / Evaluation
  • Communications (Spoken) / Listening
  • Communications (Written)
  • Diligence
  • Practical Judgment
  • Questioning / Fact Finding
  • Organizing and Managing Self
  • Passion / Engagement
  • Self-Awareness / Self-Development
  • Stress Management
• Technical Skills
  • Familiarity with the following:
    • Application Security
    • Attack Frameworks
    • Cloud Platform Security
    • Container Security
    • Database Security
    • Email Security
    • Endpoint Security
    • Incident Response Frameworks
    • Incident Response Activities
    • Network Security
    • Social Engineering Techniques
  • Fundamental knowledge of the following:
  • Endpoint Detection & Response (EDR) Tooling
  • Log Analysis
  • Security Information & Event Management (SIEM) Tooling

Visa sponsorship is not offered for this role.

The base salary range for this role in New York, based on a Full Time Schedule, is $134,000-$180,000 USD. Total compensation package will include base salary + bonus/commission + equity + benefits (health, dental, life, 401k, and paid time off). The actual total compensation offer will be determined based on various factors including applicant's qualifications, skills, experiences, and location.

• Pioneer Innovation: Work with the leading, award‑winning process mining technology, shaping the future of business.
• Accelerate Your Growth: Benefit from clear career paths, internal mobility, a dedicated learning program, and mentorship opportunities.
• Receive Exceptional Benefits: Including generous PTO, hybrid working options, company equity (RSUs), comprehensive benefits, extensive parental leave, dedicated volunteer days, and more.
• Prioritize Your Well‑being: Access to resources such as gym subsidies, counseling, and well‑being programs.
• Connect and Belong: Find community and support through dedicated inclusion and belonging programs.
• Make Meaningful Impact: Be part of a company driven by strong values that guide everything we do:
  Live for Customer Value, The Best Team Wins, We Own It, and Earth Is Our Future.
• Collaborate Globally: Join a dynamic, international team of talented individuals.
• Empowered Environment: Contribute your ideas in an open culture with autonomous teams.

Celonis makes…