Security Operations Analyst
Core
Investigate security threats, respond to incidents, and manage security tools and services for a fintech bank.
Role type
Security Operations Analyst
Builds
Security operations capabilities including alert investigation, incident response, and tool management
Domain
Fintech / Banking
Required skills
Security fundamentals, log analysis, incident response lifecycle, OS knowledge (Windows/macOS/Linux), networking, cloud concepts (AWS IAM/S3/CloudTrail), analytical investigation, prioritization
Preferred skills
SIEM/EDR tooling, scripting (Python/Bash/PowerShell), phishing/vulnerability management, MITRE ATT&CK, version control, regulated environment experience, security certifications
Technologies
Splunk, SentinelOne, Netskope, AWS security services, Mimecast, Tenable, AWS GuardDuty
Responsibilities
Review and triage security alerts and incident tickets; Analyze security logs to identify suspicious activity; Investigate threats including phishing, malware, and account compromise; Follow incident response playbooks and escalate incidents; Maintain investigation notes and documentation; Collaborate with IT, IAM, engineering, fraud, and customer service teams; Participate in peer reviews and incident retrospectives; Support improvements to security processes
Seniority
Junior to Mid-level, hands-on IC
