[Hiring] Security Analyst @Oportun

Role Description

This newly created role supports Oportun's 24/7 Cyber Security Operations Center by conducting technical analysis of security events and supporting immediate containment, investigation, and remediation. The Security Analyst also helps strengthen defenses by applying knowledge gained throughout the response process.

At Oportun, we move fast and we hold each other to a high bar. If you care about doing your best work while actually moving the needle for real people, you'll fit right in.

What You'll Do

• Monitor and analyze traffic, security events, and alerts, and advise on appropriate remediation actions.
• Review and assess the impact of security incidents and the remediation actions required to address them.
• Investigate intrusion attempts and analyze exploits by correlating multiple sources to determine affected systems or data sets.
• Follow standard operating procedures for detecting, classifying, documenting, and reporting security incidents.
• Analyze network and host-based security appliance logs, including EDR, firewalls, NIDS, HIDS, and system logs, to determine remediation actions and escalation paths.
• Independently identify, contain, analyze, document, and eradicate malicious activity in accordance with established procedures.
• Escalate intrusion events, security incidents, threat indicators, and warning information to the appropriate client and stakeholders.
• Look for practical ways to use AI tools thoughtfully to work smarter, reduce manual work, and make better decisions faster.

Qualifications

• You have a bachelor's degree in computer science, information systems, or a related field from an accredited institution, or 2–5 years of relevant experience in SOC, incident response, or cyber forensics.
• You have at least 2 years of prior SOC experience, including relevant internships.
• You have experience working with Splunk SIEM and analyzing logs from security devices such as firewalls, proxies, and EDR platforms.
• You have hands-on experience handling cyber incidents, performing L1 ticket analysis, identifying false positives, and correlating incidents.
• You understand network architecture and can connect events logically across systems and environments.
• You have working knowledge of the TCP/IP suite and OSI protocol layers, network and systems architecture, and intrusion detection systems.
• You understand web application architecture, Active Directory, and major application-layer protocols such as HTTP, SMTP, and DNS.
• You understand common malware categories and how they function, including rootkits, trojans, adware, exploits, and fileless malware.
• You have strong organizational, time-management, prioritization, documentation, and communication skills, with the ability to work effectively across functional and organizational boundaries.

Requirements

• You have experience working with or partnering closely with network, engineering, and application teams.
• You hold a preferred security certification such as Security+ or a similar credential.
• You've used AI tools (ChatGPT, Copilot, or similar) to improve your own productivity.

Benefits

• Medical, Dental & Vision Insurance
• Provident Fund
• Life & Accident Insurance
• Internet, Fuel, Meal & Telephone Allowances