Job
Core
Security Analyst focused on detection, monitoring, and incident response within a fintech security team.
Role type
Security Analyst (Incident Response & Detection)
Builds
Security event monitoring systems, incident response playbooks, and detection rules.
Domain
Fintech, Cybersecurity, Cloud & Hybrid Infrastructure
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
Incident response (L2), SIEM (Splunk), correlation rule development, attack emulation, Python automation, network traffic analysis, MITRE ATT&CK, OS security mechanisms, distributed environment investigation.
Preferred skills
EDR (SentinelOne), vulnerability analysis, SQL, open-source analytical systems (ELK, Loki, ClickHouse), compliance audits (PCI DSS, DORA), regular expressions, AI tooling for security.
Technologies
Splunk, CheckPoint, Rapid, AWS, OpenStack, Gitlab, Kubernetes, IaC, Python, Linux, Windows, MacOS, SentinelOne.
Responsibilities
Develop event correlation rules and incident response playbooks; analyze and monitor security events; lead or participate in incident response processes; coordinate vulnerability remediation; conduct attack emulation for detection checks; perform periodic incident response exercises; participate in security audits.
Seniority
Mid-level (3+ years experience)