Security Operations Analyst (Assistant Vice President)

About this role

We are seeking a motivated and technically proficient Senior Security Operations Analyst to join our Global Security Operations Centre. The ideal candidate will possess strong analytical skills, solid knowledge in cybersecurity, networking, cloud technologies, security frameworks such as NIST and/or MITRE ATT&CK, and hands-on experience with enterprise security tools and platforms. This role requires a minimum of 4 years of experience in security operations.

Key Responsibilities

• Monitor, detect, investigate, and respond to security events and incidents across the firm's global infrastructure.
• Perform in-depth analysis of security alerts from multiple security tools to determine scope, impact, and root cause.
• Manage and respond to cybersecurity incidents, ensuring timely escalation, containment, and thorough documentation.
• Utilize Endpoint Detection and Response (EDR) solutions such as CrowdStrike and Microsoft Defender to investigate endpoint-level threats and suspicious activity.
• Leverage SIEM technology for security monitoring, log correlation, threat hunting, and development of detection rules.
• Utilize email security solutions to investigate and respond to phishing and other email-based threats.
• Monitor Data Leak Protection (DLP) tools and investigate potential unauthorized data exfiltration events.
• Conduct threat hunting activities using MITRE ATT&CK framework to proactively identify adversary techniques within the environment.
• Collaborate with IT, Infrastructure, networking, and application teams to investigate security events and support remediation efforts.
• Participate in security assessments, vulnerability assessments, and penetration tests to identify and mitigate potential risks.
• Contribute to the development and refinement of security playbooks, runbooks, and standard operating procedures.
• Review firewall and network security policy requests, providing security analysis and recommendations.
• Support and mentor junior SOC Analysts, contributing to a culture of continuous learning and improvement.
• Serve as a senior point of contact during shift operation, triaging escalations and coordinating analyst workload when delegated by SOC leadership.

Qualifications

• 4 years+ of experience in cybersecurity operations, preferably in a financial services environment.
• A bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Strong communication skills with the ability to effectively convey security findings to both technical and non-technical stakeholders.
• Ability to work independently and make sound decisions under pressure.
• High level of integrity and confidentiality.
• Strong analytical and problem-solving skills with the ability to think critically during high-pressure incidents.
• Solid knowledge of networking principles and protocols.
• Familiarity with securing and using AI technologies.
• Experience with cloud platforms such as AWS and Azure.
• Hands-on proficiency with cybersecurity tools and technologies, including EDR solutions, firewalls, and DLP strategies.
• Experience with email security solutions such as Proofpoint.
• Experience with Splunk for security monitoring and analysis.
• Relevant certifications such as GCIH, GCIA, CISSP, or OSCP are highly desirable.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.