Note: The job is a remote job and is open to candidates in USA. A leading financial services organisation is seeking an experienced Information Security Analyst to join its Security Operations team. The role focuses on advanced threat detection, malware analysis, security automation and AI-enabled cybersecurity capabilities, while collaborating across security teams. Responsibilities include developing detections and SOAR automations, analysing security events, supporting incident response and threat hunting, and mentoring junior analysts.
Responsibilities
- Perform advanced malware analysis and extract Indicators of Compromise (IOCs) to support threat intelligence and detection activities
- Develop and deploy SOAR automations to improve and accelerate SOC processes
- Collaborate with data science teams to develop and implement AI/agentic capabilities for cybersecurity operations
- Enhance threat prevention, detection and hunting capabilities through security intelligence and analytics
- Develop, optimise and tune detection rules and alerting logic across security platforms
- Analyse security events and large datasets using SIEM technologies
- Serve as a technical escalation point for other SOC analysts
- Provide mentoring and technical guidance to junior analysts
- Perform quality assurance activities to ensure investigations and documentation meet required standards
- Support the development of new security detections and automated response capabilities
- Contribute to incident response, threat hunting and broader cyber defence initiatives
Skills
- • Bachelor's degree in Cybersecurity or a related discipline, or equivalent professional experience
- • 8+ years of experience within a Security Operations Centre or comparable technical cybersecurity environment
- • 1+ year of experience applying AI models to enhance cybersecurity or SOC capabilities
- • 2+ years of Python development experience
- • 2+ years of experience with SOAR platforms
- • Relevant cybersecurity certifications such as CISM, CEH, GCIH, GCDA or equivalent
- • Experience with SIEM platforms and analysing large volumes of security data
- • Strong knowledge of the MITRE ATT&CK framework and modern attack and defence techniques
- • Experience developing and tuning security detections and alerting platforms
- • Strong understanding of operating systems, processes and file structures across Windows, macOS and Linux
- • Knowledge of cloud environments, particularly AWS and Azure
- • Strong understanding of networking concepts including TCP/IP, DNS, HTTP/S and packet-level analysis
- • Experience with PowerShell or other scripting languages in addition to Python
- • Knowledge of web application vulnerabilities, authentication mechanisms such as SAML and OAuth , and common adversarial techniques
- • Strong analytical, problem-solving and communication skills
- • Confidence communicating technical findings and recommendations to senior stakeholders
- • Ability to participate in out-of-hours security escalations
- • CISSP
- • CISM
- • CISA
- • GCIH
- • GCFR
Company Overview