Senior Security Operations Analyst (Detection & Response)

Join Point Digital Finance as a Senior Security Operations Analyst (Detection & Response). In this high-visibility role, you will partner with the security lead to detect, investigate, and contain threats in a regulated consumer-finance environment. You will engineer detections, automate responses, and improve the overall security operations program. This position offers a competitive salary, generous vacation policy, health insurance, and work-from-home stipends.

• Detect, investigate, and contain threats across a regulated consumer-finance environment, partnering directly with the security lead.
• Engineer detections, automate the response, and harden how we see our AWS, Google Workspace, and SaaS estate.
• Build and maintain incident-response runbooks, escalation paths, and post-incident reviews so response is consistent and repeatable.

• If you like building as much as responding — and want your work to directly reduce risk to real people's financial lives — this role is for you
• Demonstrated ability to investigate and contain incidents end to end — e.g., phishing/AiTM, account takeover, business email compromise, and cloud/identity threats
• Practical cloud security experience in AWS and Google Workspace, including identity and log sources
• Comfortable operating with autonomy on a small team and owning problems end to end
• Hands-on experience running or actively participating in an on-call / incident-response rotation, independently
• Clear written and verbal communication — able to produce runbooks, metrics, and audit-ready documentation
• Working knowledge of vulnerability management and coordinating remediation with engineering teams
• Strong SIEM skills — authoring and tuning detections, correlation rules, and dashboards (Coralogix, Splunk, Elastic, Microsoft Sentinel, or similar)
• Authorized to work in the United States, and able to participate in an off-hours on-call rotation
• Scripting and automation ability (Python or similar) for detection-as-code and SOAR-style workflows
• 5+ years of experience in security operations, incident response, SOC, or detection engineering (mid-to-senior individual contributor)
• Hands-on experience using AI/LLMs for security analysis, investigation, and alert engineering (detection authoring, correlation, tuning, and automation)
• Experience in a regulated financial-services or fintech environment (GLBA, NYDFS Part 500, SOC 2)
• Relevant certifications (e.g., GCIA, GCIH, GCED, GIAC, CySA+, Security+, or AWS Security Specialty)
• Experience standing up detection & response practices from an early or greenfield state