Role overviewA global Security & Information team is hiring a SecOps specialist to safeguard infrastructure supporting a digital-asset platform used by major financial institutions and Web3 companies. The role spans detection engineering, incident response, and security tool administration in a high-growth, fast-paced setting where multiple projects move in parallel. Some weekend and night shifts are required.
Responsibilities
- Investigate alerts, perform triage and deep-dive analysis, and produce actionable remediation plans.
- Perform host-based, artifact, and malware analysis in support of active investigations and incident response.
- Coordinate investigation, containment, and broader response efforts with business stakeholders and partner groups.
- Author incident analysis and findings reports for management, calling out gaps and recommending improvements.
- Recommend or develop new detection logic and tune existing sensors and security controls.
- Build custom SIEM queries and dashboards to monitor and detect advanced TTPs across the network.
Requirements
- 3+ years in an Incident Response or Security Operations Center (in-house or outsourced), managing security incidents end-to-end and writing incident reports.
- Track record managing low-to-high-risk cybersecurity events, including monitoring, analysis, and escalation across IT/DevOps.
- Experience collaborating with stakeholders to drive incident response and remediation, plus runbook development for frequent or critical incident types.
- 3+ years working hands-on with SIEM, threat analytics, intrusion detection, malware detection, DLP, and IAM tooling.
- Solid grasp of system and security controls on at least two operating systems (Windows, Linux/Unix; macOS a plus), including host-based forensics and OS-artifact analysis.
- Analytical problem-solver with a growth mindset and excellent cross-team communication skills.
Nice to have
- Bachelor's degree in Computer Science, Information Technology, or a related field.
- Familiarity with cloud services, Kubernetes, cloud-environment architecture, and the major providers (AWS, GCP, Azure).
Benefits and work setup
- New York-based or approved New York remote, with required shifts covering some weekends and nights.