Sr. Security Operations Analyst

Your Role:

We are seeking an experienced Senior Security Operations Analyst who can help expand our SecOps efforts and ensure the security and integrity of our Firm. The role requires a deep understanding of Cybersecurity principles, incident response, and proactive threat detection with a proven track record of monitoring and managing security events. If you’re ready to be part of a transformative team and thrive on the excitement of discovering and responding to Security challenges in a high paced environment, apply now! 

The Security Team is 100% distributed and remote. This role will be reporting directly to the CISO.

Things You Get To Do:

• Lead and triage security events including potential security incidents, malware infections, unauthorized access, fraud, and data exfiltration events
• Conduct thorough analyses of events, assess impact, and implement corrective actions by collaborating with cross-functional teams to prioritize and remediate issues as necessary
• Manage and optimize our SIEM for enhanced log ingestion, correlation, and alerting by maintaining custom rules to elevate our detection/response capabilities
• Work closely with our cybersecurity vendors and MSSPs as needed
• Leverage Threat Intel feeds to enhance monitoring capabilities
• Implement strategies for proactive threat detection
• Assist with our insider threat program
• Lead and assist with vulnerability assessments and penetration testing activities, including managing our bug bounty program
• Maintain reporting on our SecOps KPIs and other metrics as required
• Assist with fraud investigations
• Conduct Threat Hunting activities to identify potential issues

Who You Are (Must-Haves):

• Excited about Alpaca’s mission and what we’re building
• 5+ years of experience in a security operations or incident response role
• Experience with implementing and maintaining SIEM solutions, IDS/IPS, endpoint solutions, and other security tools
• Experience with cloud-centric environments and cybersecurity capabilities
• Strong analytical and problem-solving skills
• Excellent communication skills and committed to work collaboratively across the Firm
• Available for on-call rotations and after hour responses as needed

Who You Might Be (Nice-to-Haves):  

• Bachelor’s degree in Information Technology or a related field
• Security related certifications such as CISSP, GIAC, CEH, OSCP is a plus
• Experience in securing and monitoring APIs
• Understanding of financial and privacy regulations
• Experience in the financial services industry
• Business acumen to be able to balance tradeoffs between stakeholders and technology feasibility and budget constraints