Security Intelligence and Reporting Analyst (Hiring Immediately) in London

London, UK (Hybrid: 3 days p/week in-office). An exciting opportunity within the Security Strategy and Governance (SSG) team whose mission is to ensure the safety and security of our customers, partners and Klaviyo as well as deliver best in class technology solutions, infrastructure and services. This is achieved by providing a robust and secure technology foundation to do great work. The SSG team assists the Global Security Services (GSS) organization in developing and refining information security strategy, creating metrics and reporting, coordinating cross-functional projects, and strategically aligning global information security initiatives with the broader CISO vision.

Your role will be a conduit between security reporting and supporting day-to-day security detection & response operations. Your main focus will be on building “source-of-truth” dashboards and metrics for the GSS organization; the rest of the time will also focus on triaging, enriching, and escalating security detections in partnership with the SIO team. The remit spans data engineering, business intelligence, security telemetry and operations so security leaders can make faster, better decisions on risk, reliability, and incident outcomes.

Your role will be to design, implement and manage data analytics and reporting dashboards using strategic tooling and processes, ingesting data from a wide range of GSS organization’s key source systems through APIs and creating management level reports and having those published for company wide consumption. You’ll work closely with security experts as well as other Klaviyo functions to understand the data, ensuring it’s accurate and governed.

This role also necessitates a contribution to the Security Intelligence Operations team by supporting threat detection and response services. As the individual develops and gains proficiency in this area, the scope of responsibilities will expand to include building detections, and contributing to threat hunts, digital forensics and incident response. As a member of the team, you will have the opportunity to work on complex security challenges and combat cyber threats specific to Klaviyo’s assets.

• Develop and own an effective and comprehensive reporting dashboard with visualizations, reports, and analysis that reflect the source of truth in terms of performance monitoring for the GSS organization.
• Enable automated and accurate reporting of GSS metrics in forums such as Monthly Projects and Services Meetings, PMO Reviews, Strategic Initiatives and Board Materials.
• Support our GSS organization with analytical support to assist in data driven problem solving.
• Perform host and network based log analysis in a cloud first environment.
• Leverage AI and/or build security tools to automate threat response tasks.
• Work with engineering stakeholders to improve security posture post investigations.
• Identify potential risks based on trends and communicate those insights back to the organization.

Proven 5+ years of experience as a business intelligence and data analytic (essential), preferably in the SaaS industry. Extensive, demonstrable experience reading and writing complex SQL queries for data collection and analysis including using visualization platforms such as Tableau, Power BI, Apache Superset or similar (essential). Scripting experience using Python (web scraping), dbt and bash (essential). Experience using or ingesting data from Splunk, Snowflake and other monitoring tools (essential). You’ve already experimented with AI in work or personal projects, and you’re excited to dive in and learn fast. You’re hungry to responsibly explore new AI tools and workflows, finding ways to make your work smarter and more efficient (essential). Be curious, innovative, creative and agile, developing and championing new ideas, identifying opportunities, and learning fast along the way. Strong time-management skills, with the ability to prioritize tasks, meet deadlines, and adapt to changing project requirements and timelines.

2+ years of hands-on security operations experience in cloud-native environments. Experience in triaging and responding to cyber threats, alerts, and incidents as well as log analysis, incident response and/or digital forensics. Experience securing cloud environments such as AWS, GCP, and/or Azure. Knowledge of security and IT frameworks such as NIST CSF, ISO 27001, SOC2, PCI-DSS. Experience using ASANA or any project management tools including creating integrations for reporting purposes. Experience in information security and IT practices around services, cloud infrastructure, hosting and platforms.