Senior Security Analyst

View full description

Requirements:

• 5-8 years experience as a Senior Security Analyst, Penetration Tester, Senior Red Team Analyst, Risk Analyst, or Vulnerability Researcher.
• 5-8 years designing, building, or operating security controls in cloud environments or distributed systems.
• Demonstrated experience working cross-functionally to deliver effective security capabilities.
• Demonstrated experience with scripting and building automations in complex environments.
• Intermediate operating systems support, development, or security hardening experience with Windows, MacOS, and Linux.
• Demonstrable experience working to secure distributed systems and web applications.
• 1-2 years experience with infrastructure as code frameworks.
• Experience with industry security frameworks such as SANS Top 20, CIS, NIST, MITRE ATT&CK, OWASP.
• Demonstrable interest in particular topics in the security industry.

Responsibilities:

• Develop, test, and implement new ways to solve security issues.
• Embed with product and engineering teams to identify, evaluate, and treat security risks during the product development lifecycle.
• Collaborate with member services and investment operation teams to assess and enhance processes, identify risks, and create risk mitigation capabilities.
• Develop automations to handle, track, and heal from potential security incidents, report on, and remediate vulnerabilities.
• Assist with investigation of potential incidents and subsequent response.
• Create security patterns for cloud systems and collaborate with platform engineering team members to implement.
• Support the evaluation of new technologies, vendors, or processes that enhance security capabilities and advise on their effectiveness in the context of the business.
• Support / guide vulnerability testing, risk analyses and general security assessments.
• Contribute technical expertise to corporate security policies, procedures, standards, or guidelines.
• Conduct reviews of existing security technologies, generate recommendations, and implement enhancements, where appropriate.