[Hiring] Senior Information Security Analyst @Oportun

Role Description

Oportun is looking for a Senior Information Security Analyst, with a passion for conducting the technical analysis for events. This includes immediate containment, investigation and management of remediation actions, as well as enhancing defenses with the new knowledge acquired throughout the response process. This is a 24/7 position on rotational shift.

Responsibilities

• Monitor and analyze traffic and events/alerts escalated by L2 and advise on remediation actions.
• Review and assess impact and remediation actions for incidents.
• Creation and continuous improvement of monitoring alerts.
• Deep analysis of security incidents to identify the root cause.
• Create new rules in SIEM to identify threats.
• Investigate intrusion attempts and perform analysis of exploits by correlating various sources and determining which system or data set is affected.
• Follow standard operating procedures for detecting, classifying, and reporting incidents.
• Analyze a variety of network and host-based security appliance logs (EDR, Firewalls, NIDS, HIDS, Sys Logs, etc.) to determine the correct remediation actions and escalation paths for each incident.
• Independently follow procedures to identify, contain, analyze, document and eradicate malicious activity.
• Escalate information regarding intrusion events, security incidents, and other threat indicators and warning information to the client.

Qualifications

• Bachelor’s degree in computer science, information systems or related field from an accredited institution OR 5 years of relevant experience in SOC, Incident response or Cyber Forensics.
• Experience in decoding logs from different security devices like Firewall, proxy, EDR etc.
• Experience in handling cyber incidents on a day to day basis.
• Experience in performing L1 analysis of tickets and determining if it's a false positive or not.
• Experience in correlating incidents.
• Experience in understanding network architecture and connecting events logically.
• Experience working in or with different teams like network, engineering, application etc.
• Ability to communicate efficiently with internal team members at all levels and across functional and organizational boundaries.
• Working knowledge of the TCP/IP suite/OSI layers of protocols.
• Conceptual knowledge of network and systems architecture.
• Familiarity with Intrusion Detection Systems configuration and operation.
• Web application architecture.
• Active Directory Solid understanding of how major application layer protocols function (e.g., HTTP, SMTP, DNS).
• Knowledge of categories of malware and how they function (e.g., rootkits, trojans, adware, exploits, fileless).
• Organizational skills and time management/prioritization.
• Comfortable working against deadlines in a fast-paced environment.
• At least 3 years of prior SOC experience (can include internships).
• Ability to build a strong, positive relationship with partnering engineering and security teams to develop effective solutions.
• Ability to sufficiently document engineering efforts and results.
• Passion for Security, Technology and Automation.
• Preferred Certifications (Security+, etc.).

Requirements

• Ability to communicate efficiently with internal team members at all levels and across functional and organizational boundaries.
• Working knowledge of the TCP/IP suite/OSI layers of protocols.
• Conceptual knowledge of network and systems architecture.
• Familiarity with Intrusion Detection Systems configuration and operation.
• Web application architecture.
• Active Directory Solid understanding of how major application layer protocols function (e.g., HTTP, SMTP, DNS).
• Knowledge of categories of malware and how they function (e.g., rootkits, trojans, adware, exploits, fileless).
• Organizational skills and time management/prioritization.
• Comfortable working against deadlines in a fast-paced environment.
• At least 3 years of prior SOC experience (can include internships).
• Ability to build a strong, positive relationship with partnering engineering and security teams to develop effective solutions.
• Ability to sufficiently document engineering efforts and results.
• Passion for Security, Technology and Automation.
• Preferred Certifications (Security+, etc.).

Benefits

• We are proud to be an Equal Opportunity Employer and consider all qualified applicants for employment opportunities without regard to race, age, color, religion, gender, national origin, disability, sexual orientation, veteran status or any other category protected by the laws or regulations in the locations where we operate.
• California applicants can find a copy of Oportun's CCPA Notice here: California Privacy Notice .
• We will never request personal identifiable information (bank, credit card, etc.) before you are hired.
• We do not charge you for pre-employment fees such as background checks, training, or equipment.
• If you think you have been a victim of fraud by someone posing as us, please report your experience to the FBI’s Internet Crime Complaint Center (IC3).