Senior Security Analyst III job at OppFi in US National

OppFi; United States; Remote; USD 102,000 - 154,000; Full time

Benefits offered by this job

401(k) matching

Medical, dental, and vision

Tuition reimbursement

Remote work environment

Job summary

OppFi in the United States is seeking a Senior Security Analyst III to join our security operations team. You will monitor alerts, assist incident triage, and help with vulnerability remediation to maintain security, visibility, and compliance.

This role provides growth in cloud environments and threat detection, with hands-on use of SIEM, EDR, and related tools, plus opportunities to automate playbooks and improve security processes.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or equivalent.
• 3–5 years of professional information security experience.
• Experience with security frameworks and cloud security practices.
• Familiarity with MITRE ATT&CK and incident triage workflows.

Responsibilities

• Monitor security alerts and assist triage of incidents.
• Assist in incident response playbooks: investigation, containment, documentation.
• Document and track security incidents for audits.
• Configure and refine SIEM alerts and reporting.
• Perform regular log reviews for suspicious activity.
• Support deployment of new security tools and basic threat detection logic.

Skills

Security Operations

Incident Response

Vulnerability Management

Cloud (AWS)

SIEM

EDR

Networking

Scripting

SOAR

Education

Bachelor's degree in Cybersecurity or related field

Tools

CrowdStrike

Splunk

Azure Sentinel

Google Chronicle/SecOps

Qualys/Tenable/Rapid7

Job description

Senior Security Analyst III

Location: United States

OppFi is a leading tech-enabled digital finance platform that works with banks to provide financial products and services for everyday Americans. Through a transparent and responsible platform, which includes financial inclusion and excellent customer experience, the Company supports consumers who are turned away by mainstream options to build better financial health.

We are a team of caring, innovative, and inclusive individuals who thrive in being immersed in diverse talents, expertise, perspectives, and backgrounds. Our employees approach every new challenge with an unparalleled ability to see what could be rather than settle for what is. Our business principles guide us and create an open and collaborative culture where we improve 1% every day, and the best ideas always win! We welcome individuals who want to make an impact in the financial system by facilitating credit access, expanding financial inclusion, promoting financial health, and delivering exceptional customer service.

A few other fun facts about us. OppFi is one of the top consumer-rated financial platforms online, maintaining a 4.4/5.0-star rating on Trustpilot. We are a 2025 Crain’s Fast 50™ company and were named on Built In's 2026 Best Places to Work in Chicago.

About the job:

As a Senior Security AnalystIII, you will be a key contributor to our day-to-day security operations, assisting with threat monitoring, incident triage, and vulnerability remediation. This role is an excellent opportunity for someone with security experience who is eager to grow their skills in cloud environments, incident response and security best practices. You will work closely with senior team members and various OppFi internal teams to ensure our environment maintains security, visibility, and compliance standards.

What you get to do:

Security Operations & Incident Response

• Monitor security alerts from various tools (SIEM, EDR, cloud logs) and support the triage of potential security incidents by gathering initial data and escalating to senior engineers as needed.
• Assist in the execution of security incident response playbooks, focusing on initial steps like investigation, containment, and documentation.
• Contribute to the documentation and tracking of security incidents to support audit and compliance requirements.
• Support the monitoring and logging strategy by assisting with the configuration and tuning of SIEM (Security Information and Event Management) alerts and report.
• Perform regular log review and analysis for suspicious activities under the guidance of senior staff.
• Learn to deploy and manage new security tools and assist in the development of basic threat detection logic.

Vulnerability Management and Posture Improvements

• Support day-to-day vulnerability tracking, replacing standard CVSS tracking with exposure and exploitability-based risk assessment.
• Identify potential IT controls risks and opportunities, offering sustainable recommendations that address root causes rather than symptoms.
• Assist with reporting to measure the effectiveness of security controls.

Process Improvement & Collaboration

• Contribute to the development and maintenance of operational playbooks and documentation for security processes.
• Collaborate with team members to help transition existing manual workflows into automated playbooks/processes.
• Performs other related duties as assigned.

What you will bring to the team:

• Bachelor’s degree in Cybersecurity, Computer Science, or equivalent experience.
• 3–5 years of professional experience in Information Security with demonstrated expertise in at least one of the following areas: Security Operations, Incident Response, or Vulnerability Management.
• Experience with
  • Security and control frameworks, such as FFIEC, NIST, COBIT, ITIL, and ISO control framework
  • EDR platforms (e.g., CrowdStrike, Defender for Endpoint, SentinelOne)
  • SIEM/SOAR tools (e.g., Sumo Logic, Splunk, Chronicle, Azure Sentinel, Google Secops)
  • CSPM tools (e.g., Wiz, Prisma, Orca)
  • Vulnerability management platforms (e.g., Qualys, Tenable, Rapid7)
• Next-Gen firewall tools (e.g. Cisco FMC, Palo Alto Panorama, FortiGate)
• Experience identifying potential IT controls risks and opportunities through and offering sustainable recommendations that address cause rather than symptoms
• Experience with information security standards, best practices for securing computer systems within applicable laws and regulations
• Solid understanding of common attack techniques (MITRE ATT&CK), incident triage, and remediation workflows.
• Foundational knowledge of AWS (Amazon Web Services) or other cloud environments.
• Strong understanding of networking, operating systems (Linux/Windows), and common security principles (e.g., least privilege, defense-in-depth).
• Strong hands-on experience or familiarity with API integrations, scripting, or utilizing SOAR platforms (e.g., Cortex, Google SecOps, Splunk SOAR) to support automation frameworks.
• Strong written communication skills necessary for developing clear, concise procedures and playbooks, coupled with effective verbal skills for communicating technical findings.
• Experience building dashboards and metrics for leadership visibility.
• Strong analytical and problem-solving skills with a keen attention to detail and a desire to learn quickly.
• Certifications such as CompTIA CySA+, GCIH, GCIA, GMON, GCDA, GSOC, or CISSP associate are preferred.
• Firewall management experience preferred.
• Experience working in a regulated industry (financial services or health care) preferred.

Reports to: Manager, Security Operations

Total Rewards and Benefits:

At OppFi, we are committed to fostering a fair and equitable workplace. The compensation range for this role reflects our good faith compensation estimate for this position. Final offers are determined based on a myriad of factors including, but not limited to experience, skills, qualifications, and other relevant business considerations. Candidates are encouraged to discuss compensation expectations during the hiring process. In addition to base pay, the total compensation package includes eligibility and potential for performance-based bonuses and equity grants dependent upon the role and job level.

OppFi offers a flexible, remote environment, 401(k) matching program, and generous paid time off. Other benefits include medical, dental, and vision coverage, and tuition reimbursement. Additional benefits include DoorDash DashPass, Figo pet insurance, Rocket Lawyer, and access to LinkedIn Learning. OppFi also offers Fringe, a lifestyle benefits platform that allows employees to decide how to spend rewards from dozens of vendors like Uber, DoorDash, and UrbanSitter. #LI-Remote

Compensation Range:

$102,400 - $153,600 USD

EEO Statement:

OppFi is an equal opportunity employer and does not discriminate based on any actual or perceived legally recognized protected bases under local, state, federal law, or regulations. Our goal as a company is to build an equitable workplace that actively works to dismantle systems of oppression in our processes, procedures, and interactions. We aim to help our employees thrive where they work and beyond.

The information in this document is for general informational purposes only. It is not intended to be an all-inclusive list or description of the organization and its requirements for positions and employees. OppFi reserves the right to modify or change the information on this document at its discretion.