Senior Security Analyst

OANDA; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

OANDA is seeking a Senior Security Analyst to drive proactive security across our digital assets and infrastructure. You will manage threat detection, vulnerability management, and incident response, coordinating with audits and regulatory bodies to ensure compliance.

Join a global team committed to robust security, governance, and continuous risk reduction. A CISSP and hands-on security background in fintech are highly valued.

Qualifications

• 5–10 years of information security experience, ideally in financial services or fintech.
• Bachelor’s degree in Computer Science, Computer Engineering, or related field.
• Hands-on offensive security experience (ethical hacking, pentesting) or malware analysis or forensics.
• Working knowledge of SOC2, ISO27001/2, and NIST; familiar with financial regulations.
• Excellent communication to translate technical findings to leadership.
• Active CISSP certification preferred, plus credentials like CISM, CISA, CEH or pen-testing certs.

Responsibilities

• Monitor, triage, and investigate security alerts across EDR, SIEM, and cloud environments.
• Proactively hunt for threats and misconfigurations across infrastructure and applications.
• Own the vulnerability management strategy and remediation in collaboration with tech teams.
• Contribute to Incident Response Playbooks; act as primary responder and lead post-mortems.
• Provide input on security controls design across cloud/network endpoints, firewalls, encryption, and apps.
• Act as liaison for internal/external audits and regulatory bodies (e.g., MAS) to remediate gaps.
• Lead security awareness initiatives and mentor teams on best practices.

Skills

InfoSec experience

Offensive security

Malware analysis

Security communications

CISSP (preferred)

Education

Bachelor’s degree in Computer Science or Computer Engineering

Tools

EDR

SIEM

Job description

Fancy helping to shape the future of FinTech?

We have always been innovators. In 1996 we were the first company to share exchange rate information, free of charge on the internet. Today, we are a world leading online trading group.

Join us to:

• Help build the future of online trading
• Be part of a culture driven by integrity and global impact
• Become part of an award-winning company - check out our full list of awards here.

We are only as good as our people. Luckily, our people are the best. Join us!

How do we work?

As a Senior Security Analyst, you will drive a proactive security lifecycle to safeguard OANDA’s digital assets and vital infrastructure. Instead of just reacting, you will manage advanced controls, optimize threat detection rules and help build resilient defense strategies against cyber incidents and malware. You will maintain operational rigor across our security posture, transforming risk matrices into strategic recommendations for management. Operating as a trusted partner, you will collaborate closely with internal audit, compliance teams, and financial regulatory agencies to ensure our systems consistently exceed global security standards.

In this role, you will:

• Monitor, triage, and investigate security alerts across EDR, SIEM, and cloud environments to swiftly isolate threats and neutralize potential compromises.
• Proactively hunt for threats and security misconfigurations across infrastructure and applications, ensuring internal systems continuously align with industry security standards.
• Own the vulnerability management strategy by using advanced scanning tools to detect risks across infrastructure/applications, assessing threat severity, and collaborating with tech teams for swift remediation.
• Contribute to the continuous improvement of Incident Response Playbooks, act as a primary responder to security incidents, lead post-mortems, and compile executive-ready incident reports.
• Provide expert input on the design of security controls across cloud/network endpoints, firewalls, encryption standards, and enterprise applications.
• Act as the key technical liaison for internal/external audits and regulatory bodies (e.g., MAS), leading remediation efforts for any detected compliance gaps.
• Lead security awareness initiatives, designing training materials against modern threats (phishing, malware) and mentoring other teams on security best practices.

What skillset do you need to be successful in this role?

• 5–10 years of dedicated experience in the Information Security industry, ideally within Financial Services or Fintech.
• A Bachelor’s degree in Computer Science, Computer Engineering, or a related field
• Hands-on technical experience in offensive security (ethical hacking, penetration testing), malware analysis (reverse engineering), or computer forensics.
• Working knowledge of industry standards and frameworks, including SOC2, ISO27001/2, and NIST, alongside experience navigating financial regulations.
• Exceptional communication skills, with a proven ability to translate complex technical findings into clear, business-focused action plans for executive leadership.
• An action-oriented mindset, meaning you are comfortable navigating complex organizational dynamics, love nimble learning and focus on continuous optimization.
• An active CISSP certification is preferred, along with complementary credentials such as CISM, CISA, CEH, or specialized penetration testing certifications.

___

At OANDA, to help us efficiently process applications, we use AI-driven tools to help source and rank candidates based on professional experience and skills. While these tools provide recommendations, our recruitment process remains human-centric: all final shortlisting and hiring decisions are made by OANDA team. You have the right to request a human review of your application.

OANDA Global Corporation is a diverse and global team with offices around the world. We value the unique skills and experiences each individual brings to OANDA. We are committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate. We provide an inclusive and accessible environment for everyone. Candidates selected for an interview will be contacted directly. If you require accommodation during the recruitment and selection process, please let us know. We will work with you to provide as seamless a recruitment experience as possible.