SOC analyst monitoring and responding to cyber threats for Wepoint’s digital transformation clients. Investigating escalated alerts and improving 24×7 security operations.
About the role
- Security operations manager defending Forward Financing’s fintech infrastructure and AI systems. Leading incident response, detection engineering, cybersecurity risk assessments, and AI security team development.
Responsibilities
- Hire, grow, and develop a team of security engineers defending endpoints, SaaS, and infrastructure.
- Own corporate systems security, including configuration hardening and vulnerability/patch oversight.
- Lead security operations and incident response as senior Incident Commander for the SIRT.
- Own and tune the detection and response funnel and CrowdStrike detection platform.
- Build and maintain detection coverage across endpoint, SaaS, identity, logs, proxy traffic, DLP events, and access trails.
- Partner with teams to build network allowlists, egress proxy, and proxy-level DLP controls.
- Partner with AppSec on detection opportunities from penetration testing.
- Set detection and response quality and coverage standards and report on metrics.
- Conduct enterprise-wide cybersecurity risk assessments.
- Build Forward's AI security capability, including detection tooling, response processes, and a specialized team.
Requirements
- 7 or more years in detection engineering, security operations, or incident response, including team leadership.
- Deep familiarity with adversary TTPs, MITRE ATT&CK, event correlation, and high-signal detection design.
- Hands-on experience with EDR/SIEM platforms and detection-as-code practices.
- Incident command experience covering triage, containment, forensics, and stakeholder communication under pressure.
- Experience securing SaaS environments and endpoint fleets, including configuration management, access governance, and vulnerability/patch management.
- Ability to communicate risk and priorities to engineers and executives.
- Cloud control-plane monitoring and identity threat detection using AWS.
- Scripting or automation in Python, Ruby, or Go.
- Bachelor's Degree in Computer Science or equivalent technical degree, or equivalent industry experience.
- Experience with SSPM or CASB tooling.
- Gen-AI triage or LLM-as-Judge production experience preferred.
- CISSP and/or CISM certification preferred.
- Red-team exposure preferred.
- Required authorization to work for any employer in the US, as asked in the application form.
Benefits
- Annual bonus potential of 12%
- Medical insurance
- Dental insurance
- Vision insurance
- Flexible time-off policy
- Paid parental leave
- RRSP match
- Wellness reimbursement
- Volunteering days
- Annual professional development budget
- Charitable donation match
- Flexible hours
- Remote-first workplace flexibility
- Access to premiere office locations
- Virtual and in-person team events
Job title
Job type
Experience level
Salary
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
SOC cybersecurity analyst monitoring and responding to cyber threats for Wepoint’s digital transformation clients. Improving 24×7 detection, investigation, and incident response capabilities.
Information Security & Compliance Analyst maintaining SOC 2, ISO 27001 and Cyber Essentials readiness for SyncEzy’s B2B SaaS integration platform. Owning evidence, controls, risks and audit coordination remotely.
Senior Security Operations Engineer monitoring incidents and leading forensics for Samsara’s IoT - connected operations platform. Building security automation and supporting insider - threat investigations.
Security Operations Engineer protecting CircleCI’s CI/CD platform, infrastructure, and customer data. Improving threat detection, incident response, automation, and AI - enabled security operations.
Senior SOC analyst leading threat detection, investigations, and incident response for Financeit, a Canadian point - of - sale financing provider. Building its new SOC’s automation, AI - threat coverage, and operational standards.
Security incident response manager leading responders and scaling AI - assisted security operations. Protecting 1Password’s password - management and unified access platform.
HRIS security analyst optimizing NBCUniversal’s global HR applications and access controls. Managing access audits, application releases, security roles, and HR systems improvements.
Security Operations Analyst supporting firewall operations and enterprise network security at CDW, a Fortune 500 technology solutions provider. Monitoring incidents, resolving client requests, and maintaining SLA performance.
Security Operations Engineer securing Tailscale’s networking platform through device, identity, access, and vulnerability management. Supporting distributed teams and automating security operations across core business systems.