Senior Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee security alerts from SIEM, EDR, and cloud logs while aiding in incident triage.

• Collect preliminary incident data and escalate potential security issues to senior engineers.

• Contribute to security incident response playbooks, encompassing investigation, containment, and documentation.

• Record and monitor security incidents to ensure compliance and audit requirements are met.

• Assist in the configuration and fine-tuning of SIEM alerts and reports.

• Conduct regular log reviews and analyses to detect suspicious activities.

• Aid in the deployment and management of new security tools.

• Support the development of basic threat detection logic.

• Facilitate vulnerability tracking utilizing exposure- and exploitability-based risk assessments.

• Identify IT control risks and opportunities while proposing sustainable root-cause solutions.

• Assist with reporting to evaluate the effectiveness of security controls.

• Develop and sustain operational playbooks and documentation related to security processes.

• Help convert manual workflows into automated playbooks and processes.

• Work collaboratively with senior team members and internal OppFi teams to uphold security, visibility, and compliance standards.

• Perform other related tasks as assigned.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, or equivalent experience.

• 3–5 years of professional experience in Information Security.

• Proven expertise in at least one of the following areas: Security Operations, Incident Response, or Vulnerability Management.

• Familiarity with security and control frameworks such as FFIEC, NIST, COBIT, ITIL, and ISO control framework.

• Experience with EDR platforms including CrowdStrike, Defender for Endpoint, or SentinelOne.

• Proficient with SIEM/SOAR tools such as Sumo Logic, Splunk, Chronicle, Azure Sentinel, or Google SecOps.

• Knowledge of CSPM tools like Wiz, Prisma, or Orca.

• Experience with vulnerability management platforms such as Qualys, Tenable, or Rapid7.

• Familiarity with next-generation firewall tools including Cisco FMC, Palo Alto Panorama, or FortiGate.

• Experience in identifying potential IT control risks and opportunities with sustainable recommendations.

• Understanding of information security standards and best practices for securing computer systems in compliance with applicable laws and regulations.

• Knowledge of common attack techniques (MITRE ATT&CK), incident triage, and remediation workflows.

• Foundational understanding of AWS or other cloud environments.

• Solid grasp of networking, Linux/Windows operating systems, and security principles such as least privilege and defense-in-depth.

• Hands-on experience or familiarity with API integrations, scripting, or SOAR platforms to support automation frameworks.

• Excellent written and verbal communication skills for procedures, playbooks, and technical findings.

• Experience in creating dashboards and metrics for leadership visibility.

• Strong analytical and problem-solving capabilities with meticulous attention to detail.

• Certifications such as CompTIA CySA+, GCIH, GCIA, GMON, GCDA, GSOC, or CISSP associate are preferred.

• Experience in firewall management is preferred.

• Prior experience in financial services or healthcare is preferred.

🏝️ Benefits

• Eligibility for performance-based bonuses and potential rewards.

• Opportunity for equity grants and potential benefits.

• Flexible, remote work environment.

• 401(k) matching program.

• Generous paid time off policy.

• Comprehensive medical coverage.

• Dental insurance coverage.

• Vision insurance coverage.

• Tuition reimbursement program.

• DoorDash DashPass benefit.

• Figo pet insurance coverage.

• Access to Rocket Lawyer services.

• Access to LinkedIn Learning resources.

• Fringe lifestyle benefits platform with rewards from vendors like Uber, DoorDash, and UrbanSitter.