Starling Bank

Everyone at Starling gets the chance to own interesting things from day one, and we’re told one of the best things about working here is the ability to achieve a lot in a short space of time.To support our growth, we are looking for SOC Analysts to join our growing cyber security function. This role will be supporting our 24/7 operational capabilities.As a member of the Starling SOC team, you will be working with the industries brightest SecOps professionals to protect Starling customers, assets, and systems using the latest technologies.Role Overview:<ul> <li>Incident Triage, Response, and Investigations based on Alerts received from multiple sources which include:<ul> <li>Cloud Infrastructure/Security.</li> <li>Endpoint Detection and Response.</li> <li>Perimeter detection tooling.</li> </ul> </li> <li>Investigating and responding to security alerts raised by Users.</li> <li>Enhancing and creating analytic triggers to enhance alert efficacy.</li> <li>Continuous development of incident handling and readiness processes.</li> <li>Proactive threat hunting based on threat intelligence.</li> <li>Documentation of incidents and investigations.</li> </ul>RequirementsWe’re open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. Below is an overview of the skills that will be used:<ul> <li>Understanding of AWS Security Solutions.</li> <li>Experience working and supporting analytics/SIEM platforms.</li> <li>Experience working in CSIRT/SOC functions.</li> <li>Experience supporting Incident Response engagements.</li> <li>Experience in endpoint based investigations.</li> </ul> <ul> <li>Interest in Automation.</li> <li>Interest in Threat Intelligence and Analytic Tuning.</li> <li>A high level understanding of mobile, network and operating system security controls.</li> </ul><ul> <li>Any experience of programming in Python, Go and/or Java.</li> <li>A Cyber/Information Security related degree and/or relevant cyber security qualification(s).</li> </ul>BenefitsWe are a leading digital bank on a mission to disrupt the banking industry. We’ve built an app with smart money management tools to help our customers live a healthier financial life. We also offer groundbreaking B2B banking and payments services.Since our launch in 2014, we’ve opened almost three million accounts including 480,000 business accounts for small and medium-sized enterprises (SMEs).We’re a fully licensed UK bank and we have the culture and spirit of a fast-moving, disruptive technology company. We’ve been voted Best Current Account for the last five years running, named Which? Banking Provider of the Year for the last two and we were the most switched to bank in 2021. We employ more than 1,800 people across our London, Southampton and Cardiff offices.Starling technology works in a hybrid pattern both from home and one of our three offices. We’re open to applications from across the UK including fully remote, if you’re hybrid our preference is that you’re located within a commutable distance to either our London, Southampton or Cardiff office, so that we’re able to see each other and collaborate in person too.Benefits:<ul> <li>25 days holiday (plus public holidays)</li> <li>An extra day’s holiday for your birthday, taken a week on either side of the day</li> <li>16 hours paid volunteering time a year</li> <li>Part-time and/or flexible hours available for most roles</li> <li>Hybrid/remote working</li> <li>Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner benefits include discounts with Waitrose, Mr&amp;Mrs Smith and Peloton</li> <li>Generous family-friendly policies</li> <li>Enhanced sick pay</li> <li>Contributory pension scheme</li> <li>Varied social groups set up and run by our employees</li> <li>Perkbox membership giving access to retail discounts, a cashback scheme, a wellness platform for physical and mental health, a birthday box and weekly free coffee</li> <li>Access to ‘salary sacrifice’ benefits such as Cycle to Work scheme</li> </ul>Full details are available on our <a href="https://www.starlingbank.com/careers/engineering/" rel="noopener noreferrer nofollow ugc" target="_blank">careers</a> siteAbout Us:We are a leading digital bank on a mission to disrupt the banking industry. We’ve built an app with smart money management tools to help our customers live a healthier financial life. We also offer groundbreaking B2B banking and payments services.Since our launch in 2014, we’ve opened almost three million accounts including 480,000 business accounts for small and medium-sized enterprises (SMEs).We’re a fully licensed UK bank and we have the culture and spirit of a fast-moving, disruptive technology company. We’ve been voted Best Current Account for the last five years running, named Which? Banking Provider of the Year for the last two and we were the most switched to bank in 2021. We employ more than 1,800 people across our London, Southampton and Cardiff offices.Starling Bank is an equal opportunity employer, and we’re proud of our ongoing efforts to foster diversity &amp; inclusion in the workplace. Individuals seeking employment at Starling Bank are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law.By submitting your application, you agree that Starling Bank may collect your personal data for recruiting and related purposes. Our <a href="https://www.starlingbank.com/legal/privacy-notice/" rel="noopener noreferrer nofollow ugc" target="_blank">Privacy Notice</a> explains what personal information we may process, where we may process your personal information, its purposes for processing your personal information, and the rights you can exercise over our use of your personal information.

Southampton

SOC Analyst

Tiendanube

<h3>Sobre Nuvemshop </h3> Somos a plataforma de e-commerce líder na América Latina que, desde 2010, trabalhamos com um propósito muito claro: potencializar e motivar pessoas empreendedoras que querem transformar seus sonhos em histórias que transcendem.Sim, o desafio é enorme, porque gostamos de pensar grande!Para isso, priorizamos o bem-estar de clientes e de todas as pessoas que fazem parte da Nuvemshop, desde Argentina, Brasil e México.Nossa cultura é sobre pessoas, e as pessoas são a alma do nosso negócio. Temos uma cultura muito forte, cuidamos e praticamos ela todos os dias. Valorizamos a excelência, a transparência, a autonomia, a diversidade e a colaboração.Devido ao compromisso de todo o time, clientes e parceiros, em 2021 nos tornamos a 5ª startup mais valiosa da América Latina, atingindo um valor de mais de 3 bilhões de dólares. Isso nos permite continuar trabalhando para reduzir ao máximo as barreiras do empreendedorismo em toda a América Latina.<h3> Nosso time de Analy </h3>Como Security Analyst (Analista de Segurança da Informação) você garantirá a confidencialidade, integridade, disponibilidade e privacidade das informações da empresa. Desenvolverá e aplicará padrões de segurança e melhores práticas, melhorando os processos de negócios. Também irá trabalhar em conjunto com outras áreas para garantir que os padrões e políticas de segurança da informação sejam aplicados e atendidos. <h3> O tamanho do seu desafio</h3><ul> <li>Planejar, projetar e implementar controles de segurança da informação.</li> <li>Definir e implantar processos e ferramentas para proteger as aplicações e os dados da empresa.</li> <li>Identificar e mitigar possíveis riscos de processos, controles operacionais e atividades de usuários.</li> <li>Analisar, avaliar e responder às ameaças e incidentes que ocorram (CSIRT).</li> <li>Monitorar eventos de segurança para detectar, prevenir e responder a possíveis incidentes (SOC).</li> <li>Desenvolver e manter métricas de indicadores de desempenho (KPIs, NPS).</li> <li>Realizar revisões de aplicativos e manutenção dos perfis de acesso (Segregação de funções - SoD).</li> <li>Atender a pedidos (N1), avaliando perfil e necessidade do acesso (Access Management).</li> <li>Garantir os processos de "Onboarding" e "Offboarding" de pessoas colaboradoras.</li> <li>Dar suporte (N1) para as ferramentas de Segurança (exemplo: Antivírus, DLP, CASB).</li> <li>Realizar atendimento nas solicitações das filas de pedidos.</li> <li>Realizar as automações para a melhoria dos processos operacionais da área de Security. </li> </ul><h3> O que buscamos </h3><ul> <li>Experiência nas áreas de Segurança da Informação, principalmente nos processos de gestão de acesso.</li> <li>Experiência em frameworks de segurança (NIST, CIS, ISO 27001 e 27002, etc.).</li> <li>Experiência em processos de auditoria e/ou certificações. </li> <li>Experiência em atendimentos de "tickets" para gestão de acesso a ferramentas, aplicações e ambiente operacional (AWS, GitHub).</li> </ul>São diferenciais:<ul> <li>Experiência em empresas Cloud.</li> <li>Conhecimento de ambiente AWS e suas ferramentas de segurança.</li> <li>Conhecimentos de linguagens de script (Ruby, Python, etc.) e integração com uso de APIs.</li> <li>Conhecimento em metodologias ágeis.</li> </ul><h3>Nosso processo</h3>Na Nuvemshop temos como propósito criar a melhor plataforma de e-commerce e por isso, precisamos formar time de alto impacto. Dessa forma, investimos muito tempo e atenção em nosso processo seletivo.Após a inscrição, seu perfil será avaliado pela equipe de Talent Acquisition e enviaremos feedback independente do resultado desta etapa. Os tempos e as etapas do nosso processo são flexíveis de acordo com cada área, mas não se preocupe, pois sempre te manteremos por dentro do andamento da sua inscrição por e-mail.<h3>O que temos para você</h3><ul> <li>Plano de Saúde, Plano Odontológico e Seguro de Vida;</li> <li>Flash Benefícios: Plataforma que reúne vale alimentação, vale refeição e outras categorias como educação, entretenimento, cultura, saúde, bem-estar, auxílio home office e muito mais;</li> <li>Somos #remotefirst, ou seja, nós priorizamos o trabalho remoto. Temos escritórios em São Paulo e temos a possibilidade do uso de Vale Transporte, Estacionamento ou Vale Combustível;</li> <li>Aulas de espanhol semanais gratuitas;</li> <li>Licença de família estendida para 21 dias corridos para pessoas não grávidas ou adotantes. A licença maternidade é de 4 meses e a licença parental de 21 dias. O benefício também vale para famílias que adotarem ou obtiverem a guarda judicial da criança e para casais homoafetivos;</li> <li>Auxílio creche para crianças de até 5 anos;</li> <li>Uma Nuvemshop gratuita para você ou pessoa próxima;</li> <li>Um ambiente com muito aprendizado, propósito e autonomia - Aqui você é livre para ser você! </li> </ul><h3>Política de Privacidade de Dados</h3>A Nuvemshop está comprometida em proteger a privacidade e garantir a segurança dos dados pessoais das pessoas candidatas às vagas que ofertamos.Para dar seguimento com a sua candidatura, teremos acesso a alguns dados pessoais seus e gostaríamos de repassar algumas informações antes de você continuar. Utilizaremos tais dados para conduzirmos os processos que envolvem o recrutamento e a seleção. Além disso, cuidamos dos seus dados pessoais de forma muita séria e só os compartilhamos com quem realmente precisa. Por fim, somente iremos mantê-los em nosso sistema pelo tempo realmente necessário. Para saber mais sobre a forma pela qual tratamos seus dados, inclusive dos seus direitos previstos em lei, basta acessar a nossa <a href="https://www.nuvemshop.com.br/politica-de-privacidade" rel="noopener noreferrer nofollow ugc" target="_blank">Política de Privacidade</a>.<h3> Diversidade e Inclusão </h3>Na Nuvemshop, acreditamos na força da diversidade e que promover um ambiente diverso impacta diretamente na geração das novas formas de resolver problemas e na criatividade para desenvolver produtos e soluções inovadoras. Nosso objetivo é proporcionar equidade de oportunidades. Valorizamos a pluralidade e equidade de raça, cor, religião, identidade de gênero, nacionalidade, deficiência, orientação sexual, ascendência ou idade.Se desejar, compartilhe conosco algumas informações adicionais sobre você, como orientação sexual, raça e identidade de gênero. Essas informações são completamente voluntárias e serão usadas para nos ajudar a conhecer mais sobre as pessoas que estão se candidatando em nossas vagas. Essas informações são confidenciais e não impactam o processo seletivo. Caso você não se sinta confortável em compartilhar essas informações conosco, basta clicar em “Prefiro não responder” no campo correspondente de cada pergunta.

São Paulo

Security Analyst - Júnior

Coinbase

We’re Coinbase. We’re the world’s most trusted way to join the crypto revolution, serving more than 89 million accounts in more than 100 countries. 
Our mission is to <a href="https://blog.coinbase.com/our-mission-strategy-and-culture-18a92a3bb0fa" rel="noopener noreferrer nofollow ugc" target="_blank">increase economic freedom around the world</a>, and we couldn’t do this without hiring the best people. We’re a group of hard-working overachievers who are deeply focused on building the future of finance and Web 3.0 for our users across the globe, whether they’re trading, storing, staking or using crypto. Know those people who always lead the group project? That’s us.
There are a few things we look for across all hires we make at Coinbase, regardless of role or team. First, we look for candidates who will thrive in a <a href="https://blog.coinbase.com/culture-at-coinbase-f0e1c2a99aff" rel="noopener noreferrer nofollow ugc" target="_blank">culture</a> like ours, where we default to trust, embrace feedback, and disrupt ourselves. Second, we expect all employees to commit to our <a href="https://blog.coinbase.com/coinbase-is-a-mission-focused-company-af882df8804" rel="noopener noreferrer nofollow ugc" target="_blank">mission-focused approach</a> to our work. Finally, we seek people who are excited to learn about and live crypto, because those are the folks who enjoy the intense moments in our sprint and recharge work culture. We’re a remote-first company looking to hire the absolute best talent all over the world.
Ready to #LiveCrypto? Who you are:
<ul>
<li>You’ve got positive energy. You’re optimistic about the future and determined to get there. </li>
<li>You’re never tired of learning. You want to be a pro in bleeding edge tech like DeFi, NFTs, DAOs, and Web 3.0. </li>
<li>You appreciate direct communication. You’re both an active communicator and an eager listener - because let’s face it, you can’t have one without the other. You’re cool with candid feedback and see every setback as an opportunity to grow.</li>
<li>You can pivot on the fly. Crypto is constantly evolving, so our priorities do, too. What you worked on last month may not be what you work on today, and that excites you. You’re not looking for a boring job.</li>
<li>You have a “can do” attitude. Our teams create high-quality work on quick timelines. Owning a problem doesn’t scare you, but rather empowers you to take 100% responsibility for achieving our mission.</li>
<li>You want to be part of a winning team. We’re stronger together, and you’re a person who embraces being pushed out of your comfort zone. </li>
</ul>Security Operations Team
Security is a primary competency at Coinbase, and the Security Operations team keeps a watchful eye over every aspect of it. Every day, we go to battle against some of the most sophisticated attackers in the world to protect billions of dollars worth of digital assets and ensure that our customers and employees can enjoy a safe, trusted experience. As Coinbase scales globally, our team is scaling along with it, using a blend of tooling, automation, and strategic team growth to ensure that we’re well-equipped to protect the next billion users of crypto.
What you’ll be doing:
The Security Operations group is a multi-functional organization that includes our CSIRT, Trust &amp; Safety, Insider Threat, and Threat Intelligence. While no two days will end up looking the same, generally-speaking you’ll be responsible for the following things:
<ul>
<li>You’ll serve as the first line of response when a security alert needs to be triaged, and lead the incident response/ management as needed</li>
<li>You’ll also refine our alerting rules to improve our signal/noise ratio, because no one wants to be a button-pusher or SOC monkey</li>
<li>If something happens twice, you’ll write a runbook for it. If it happens three times, you’ll figure out a way to automate that runbook</li>
<li>You’ll investigate and monitor cryptocurrency movements to ensure the safekeeping of customer funds</li>
<li>You’ll partner with Trust &amp; Safety and Threat Intelligence on some of our attacker investigations to build TTP profiles</li>
<li>You’ll be part of a light on-call rotation with counterparts in multiple timezones</li>
</ul>
<ul>
<li>You’ll collaborate with cross functional teams like engineering, product development, compliance to ensure timely Incident Response</li>
</ul>
What we look for in you:
Some security teams have strict requirements about certifications, degrees, years of experience, and things like that. Not us! We’re more interested in the unique perspectives and expertise you’ll bring to the team, rather than the acronyms on your resume. However, you’ll be much more likely to be successful in this role if these bullet points seem like a good description of you:
<ul>
<li>You’ve been doing practical security things (incident response, phishkit/malware analysis, investigating account compromises, etc) for a while now, probably in the realm of 7+ years</li>
<li>You don’t just reflexively open up a Jupyter Notebook during an investigation, you’ve actually got favorite Jupyter Notebooks you’ve built up over the years, because you like backing up your conclusions with data, and you like automating things</li>
<li>You eat logs and packets for breakfast</li>
<li>You frequently get praise from your peers and coworkers about your communication skills, both written and verbal</li>
<li>Your high degree of empathy means that your coworkers trust you to help solve their security problems, because you never come across as judgmental or condescending</li>
<li>You’ve got passion for security and are willing to learn and apply the knowledge</li>
<li>Pressure doesn’t get to you, even in high intensity situations or environments</li>
</ul>
Nice to haves:
<ul>
<li>You would bring a diverse perspective to the team: for example,  maybe you took an unconventional route to get into your current security career</li>
<li>You’ve got a passing familiarity with blockchains and cryptocurrency, or at least a good story about how you thought about investing in Bitcoin in 2014 but decided not to</li>
<li>You’re comfortable doing some basic scripting and writing alert rules in Python and running queries in SQL/Presto</li>
<li>You’ve got some experience with OSINT and threat hunting</li>
<li>You‘ve got some experience doing incident response in the cloud</li>
<li>You’d prefer if everyone just settled on using the ATT&amp;CK framework already</li>
<li>You’ve good understanding of Cloud and SaaS technologies </li>
<li>You are good in analyzing data at scale and perform investigations to identify adversary behavior</li>
</ul>
ID:P22338<h4>Please note that for employees based in the US, Philippines, Canada or Singapore, if your role requires you to be present in a Coinbase office or if you choose to be physically present in a Coinbase office or sponsored location, you will be required to be fully vaccinated from COVID-19 (as defined by applicable law).  If you receive an offer, you will receive additional information about the grounds and process for an exemption. </h4>
<h3>Commitment to Equal Opportunity</h3>
Coinbase is committed to diversity in its workforce and is proud to be an Equal Opportunity Employer.  All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law.  For US applicants, you may view <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency</a>, <a href="https://www.dol.gov/sites/dolgov/files/WHD/legacy/files/eppac.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Employee Rights</a> and <a href="https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Equal Employment Opportunity is the Law </a>notices by clicking on their corresponding links.  Additionally, Coinbase participates in the <a href="https://static-assets.coinbase.com/e-verify.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">E-Verify program</a> in certain locations, as required by law.    
Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please send an e-mail to accommodations[at]coinbase.com and let us know the nature of your request and your contact information.  For quick access to screen reading technology compatible with this site <a href="https://chrome.google.com/webstore/detail/chromevox/kgejglhpjiefppelpmljglcjbhoiplfn" rel="noopener noreferrer nofollow ugc" target="_blank">click here to download</a> a free compatible screen reader <a href="http://www.chromevox.com/tutorial/" rel="noopener noreferrer nofollow ugc" target="_blank">(free step by step tutorial can be found here)</a>.
<h3>Global Data Privacy Notice for Job Candidates and Applicants</h3>
Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available <a href="https://www.coinbase.com/legal/applicant_privacy_notice" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>. By submitting your application, you are agreeing to our use and processing of your data as required.

India

Lead Security Analyst - CSIRT

Lendi Group

<h3>
Location: Sydney,New South Wales,Australia 
</h3>
Lendi Group is the new group born out of the merger of Aussie Home Loans and Lendi. The business consists of two powerhouse brands that are committed to changing the experience of home lending for all Australians by removing barriers and the unnecessary admin from consumers and brokers alike. Lendi Group operates a multi-brand strategy across Aussie Home Loans and Lendi, pulling together a truly personalised home loans experience for the Australian audience that balances both human support and smart technology.  If you’re passionate about what you do, like working in a fast-paced complex platform transformation environment then this role might be for you!The OpportunityThis is a broad role that is responsible for the delivery of various aspects of information security operations and services. Aussie is on a journey to mature its information security capability, as we have recently undergone a merge, and must now ensure we deliver the right level of protection for the combined threat landscape.This role will be a part of building the future state, this includes upgrades to web protection, enhance vulnerability management across all infrastructure and code deployments, ensuring the response capability is enabled for all assets, and much more.This role will be pivotal in uplifting Aussie’s &amp; Lendi Group’s cybersecurity capability while being able to evidence the achievements already delivered.This role reports to the Senior Manager, Cybersecurity and Technology Risk and will be the subject matter expert for a range of information security technologies, principles, and best practices. This role will also be responsible for leading the implementation of security controls across a newly merged entity, additionally reviewing the configuration of the tools, investigating incidents, escalating, and reporting on events raised. What you'll do<ul><li>Provide cybersecurity function support including management of security and technology related risks within Aussie</li><li>Educate and support Technology teams to attain goals and pursue excellence in security capability</li><li>Establish and maintain operational processes for key security technologies, including CSIRT, DLP, SIEM, vulnerability management, endpoint, web, email, and SOAR within Aussie</li><li>Collect and analyse data to deliver meaningful metrics and reporting to align with regulatory requirements and governance frameworks, and other organisational Key Risk Indicators (KRI)</li><li>Work closely with the Aussie &amp; Lendi Group Technology and Risk &amp; Compliance teams</li><li>Provide input to planning and delivery of non-negotiable security controls to all business units and their impact on Aussie processes and systems</li><li>Provide delivery of information security capability, ranging from planning to deployment, and the collaboration with all stakeholders in Lendi Group</li><li>Working with the Technology and Operations Risk teams in Lendi Group to attain a common and consistent measurement of threat and risk</li><li>Work to treat control gaps and remedial actions related to information security incidents ensuring the adoption or development of relevant security services</li><li>Stay current with incident response, digital forensics methodology, the associated legal/regulatory requirements, and threats applicable to Aussie, and participate in the development of these security capabilities</li><li>Identify security controls required for new and existing digital platforms including regulatory requirements</li><li>Support the establishment of new security services in-line with changing threat profiles and organisational context</li></ul>What you'll bring<ul><li>4yrs years’ experience in information security roles</li><li>Sound technical knowledge of platform and network infrastructure, information security, and technology risk</li><li>Experience in banking, consumer lending or digital banking environments, specifically in Cloud/SaaS environments</li><li>Hands on experience with deploying security controls</li><li>Experience implementing and operating CSIRT, DLP, SIEM, vulnerability management, endpoint, web, email, and SOAR systems, processes, and procedures</li><li>Broad cybersecurity product knowledge and skills, Microsoft product knowledge and skills advantage</li></ul>Some of our perks &amp; benefits<ul><li>Enjoy the flexibility of remote working arrangements: while headquartered in Sydney, we are open to applicants across the Eastern Seaboard. </li><li>We take career development seriously. We have the opportunities, budget and frameworks in place to propel your career in the direction you want to take it! </li><li>An additional week’s Loyalty Leave each year after reaching 3 years’ service </li><li>We offer generous Paid Parental Leave: we celebrate our growing Lendi Group family with 18-26 weeks leave for primary carers and up to 4 weeks for secondary carers </li><li>Regular social and team building activities. </li><li>We run wellness initiatives with a strong focus on psychological safety </li><li>Close-knit, friendly culture with a warm &amp; casual environment. </li></ul>To learn more about life at Lendi check out our blog: <a href="https://www.lendi.com.au/inspire/category/life-at-lendi/%20" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.lendi.com.au/inspire/category/life-at-lendi/</a>Lendi Group is proud to be accredited by Project F for commitment to removing systemic barriers for women in technology!We are an equal opportunity employer that proudly champions flexibility, diversity &amp; inclusion and psychological safety for all staff. 
<a href="https://lendi.recruiterbox.com/jobs/fk027os/?apply=true" rel="noopener noreferrer nofollow ugc" target="_blank">Apply to this job</a>

Sydney

Security Engineer

Robinhood

<h3>Join a leading fintech company that’s democratizing finance for all.</h3>
Robinhood was founded on a simple idea: that our financial markets should be accessible to all. With customers at the heart of our decisions, Robinhood is lowering barriers and providing greater access to financial information. Together, we are building products and services that help create a financial system everyone can participate in.

As we continue to build...
We’re seeking curious thinkers looking to co-author the next chapters of our story. Joining now means helping shape our vision, structures and systems; playing a key-role as we launch into our ambitious future.

Check out life at Robinhood on <a href="https://www.themuse.com/profiles/robinhood" rel="noopener noreferrer nofollow ugc" target="_blank">The Muse</a>!<h3>About the team: </h3>
The Detection and Response Team (DART) at Robinhood exemplifies our Safety First value by building and operating services that protect our customers' security and privacy. DART consists of detection platform and incident response teams who work together to assess threats, collect and analyze data, and respond to events. Together, we ensure the effectiveness of our safeguards and the continuous protection of our customers.
The DART team is looking for incident response engineers to monitor the full breadth of Robinhood's technology, detect threats, and respond to events in real-time.
<h3>The Role:Security Engineer - Incident Response and Detection</h3>
Robinhood is seeking an IR Engineer to join our highly visible Cyber Security Incident Response Team that provides cyber analysis, scripting, detection creation, automation and support to our 24x7x365 Security Operations Center (SOC). This specific position requires the ability to work a 7-day on-call rotation with the other IR Engineers.
Working within Robinhood’s Computer Security Incident Response Team (CSIRT) you will have the opportunity to build innovative solutions to identify and mitigate information-security threats. With your contributions, we’re building the best security incident response team in the industry. Your skills, vision, tenacity, and passion will help us defend and respond daily to protect Robinhood’s critical assets and keep our users’ information safe.
Candidates must have experience working with various security methodologies and cutting edge technologies, experience working with modern cloud environments, and experience working with large security log datasets collected from heterogeneous environments
Must demonstrate expert knowledge in Incident Response and one or more of the following areas:
Threat Hunting, cloud security, Digital Forensics, automating repetitive tasks with SOAR platforms, and Detection creation.
<h3>Core Job Functions Include:</h3>
<ul>
<li>Investigations – Investigating computer and information security incidents to determine extent of compromise to information and automated information systems, must be familiar with notable event triage, Host Forensics, Network Analysis and containment methodologies.</li>
<li>Escalations – Responding to notable events from security tooling to develop/implement security controls,</li>
<li>Defense - countermeasures to prevent internal or external attacks or attempts to infiltrate company email, data, and web-based systems.</li>
<li>Research – Researching attempted or successful efforts to compromise systems security and designs countermeasures. Stay educated on the latest trends, techniques, tactics and procedures.</li>
<li>Education - maintaining proficiency in tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding and network security and encryption.</li>
<li>Communications – Provides information and updates to shift leads, creates pass-downs for the next on-call, works closely with supporting teams, shares ideas on new preventative and detective security controls and policy and standards, and engages with other teams.</li>
<li>Digital Forensics – As it relates to information systems, performs HR investigations and legal holds in a forensically sound manner. Consults with HR and legal domain experts to adhere to local country laws.</li>
<li>Coverage – Must be willing and able to perform shift work, weekends, and holidays as well as participate in a rotating on-call shift as needed.</li>
</ul>
To be successful in this position, you must be proficient with:
<ul>
<li>Incident Response – Getting people to do the right thing in the middle of an investigation.</li>
<li>Offensive Techniques – Penetration testing, and adversarial TTPs at all layers of the stack. Need to be very familiar with real world scenarios and current attacker behavior.</li>
<li>Logs - you are very comfortable with a SEIM to be able to gather and analyze logs to recreate incidents and hunt for threats. Must have experience developing and tuning detection logic.</li>
<li>System Forensics – Understanding of image acquisition techniques, memory, host, file and browser forensics.</li>
<li>Networking Fundamentals - TCP/IP Protocols, SSL/TLS, authentication protocols such as SAML, SSO, OAuth, and network analysis tools Wireshark/TCPDump.</li>
<li>Risk Analysis – Taking an event in a particular environment and understanding the practical associated risk to our business.</li>
<li>Automation – Creating and/or modifying scripts to automate repetitive and mundane tasks, freeing up time to focus on sophisticated investigations and other projects.</li>
</ul>
<h3>Required Qualifications:</h3>
<ul>
<li>Minimum four (4) years of professional experience in incident detection and response, threat hunting, network/cloud security, Threat Intelligence, and/or digital forensics. You have experience operating independently in a fast paced incident response, security operations, or similar environment.</li>
</ul>
In addition, minimum of one (1) year of specialized experience in one or more of the following areas:
<ul>
<li>Security Assessment or Offensive Security</li>
<li>Application Security, cloud security, network security</li>
<li>Security Operations Center/Security Incident Response</li>
<li>Cyber intelligence Analysis/Threat Intelligence</li>
<li>Creating sophisticated detections in a SIEM</li>
</ul>
At Robinhood, your work makes a difference. We believe that we can build a better form of commerce that is enabled by people, supported by technology, and open to everyone – creating more opportunity for all.We’re looking for more growth-minded and collaborative people to be a part of our journey in democratizing finance for all. If you’re ready to give 100% in helping us achieve our mission—we’d love to have you apply even if you feel unsure about whether you meet every single requirement in this posting. At Robinhood, we're looking for people invigorated by our mission, values, and drive to change the world, not just those who simply check off all the boxes.
Robinhood promotes diversity and provides equal opportunity for all applicants and employees. We are dedicated to building a company that represents a variety of backgrounds, perspectives, and skills. We believe that the more inclusive we are, the better our work (and work environment) will be for everyone. Additionally, Robinhood provides reasonable accommodations for candidates on request and respects applicants' privacy rights. To review Robinhood's Privacy Policy please visit <a href="https://app.box.com/s/7xapqr14mbgy1p85toqusy1zrum9bv8e" rel="noopener noreferrer nofollow ugc" target="_blank">Robinhood - US Applicant Privacy Policy</a>.
Click <a href="https://app.box.com/s/43kz944zm0rolmhm8j3wjft50ktu6fr5" rel="noopener noreferrer nofollow ugc" target="_blank">here</a> to learn more about Robinhood’s Benefits. 
Robinhood is a primarily remote company. If hired, you will work as a remote employee unless the job you are applying for has a different working model specified. Please reach-out  to your recruiter if you have any questions regarding the job’s working model.

United States

Sr. Security Engineer, Incident Response

Apply to Csirt Cyber Security Jobs in companies remotely and near you. New Csirt Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
SOC Analyst at Starling Bank	Remote Full Time Soc Analyst Analyst Incident Response
Security Analyst - Júnior at Tiendanube	AWS Cloud Csirt Github Iso 27001
Lead Security Analyst - CSIRT at Coinbase	Automation CCPA Cloud Compliance Crypto
Security Engineer at Lendi Group	Banking Cloud Compliance Csirt Forensics
Sr. Security Engineer, Incident Response at Robinhood	Application Security Automation Cloud Csirt Encryption

Csirt Cyber Security Jobs

0 Csirt Cyber Security Jobs. Page 1 of 1

5 closed csirt cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Csirt Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Csirt Cyber Security Jobs

0 Csirt Cyber Security Jobs. Page 1 of 1

5 closed csirt cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Csirt Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter