Senior Security Operations Analyst
Core
Triage and respond to security alerts, lead incident response, and tune detection rules for a high-growth FinTech.
Role type
Senior Security Operations Analyst (Incident Commander)
Builds
Security operations capability, detection rules, and incident response playbooks
Domain
Financial Services / Cybersecurity
Required skills
Incident command, SOC/DFIR investigation, log analysis, cloud incident response (AWS/GCP), AI security risk assessment, automation utilization, stakeholder communication
Preferred skills
Regulated environment experience, GCIH/GCFA/GCIA certifications
Technologies
SIEM, EDR, AWS, GCP, AI tooling
Responsibilities
Triage and investigate security alerts from MSSP and internal tooling; Tune detection rules to reduce false positives; Command security incidents and coordinate response across Engineering, IT, and Legal; Lead technical investigation and containment in cloud and endpoint environments; Conduct post-incident reviews and update detection playbooks; Report SecOps metrics and maintain incident records.
Seniority
Senior, hands-on IC
