Security Operations Analyst en Capital Markets Gateway

Security Operations & Incident Response

• Monitor, triage, and respond to security alerts and incidents across endpoints, cloud, and SaaS environments.
• Conduct root cause analysis, document incidents, and assist with post-incident reviews.
• Develop and maintain incident response playbooks; participate in tabletop exercises.

Endpoint & IT Security

• Administer and enhance endpoint security for macOS and Windows, supporting company-owned devices.
• Develop and manage endpoint hardening baselines, configurations, and compliance reporting.
• Support automation and scripting efforts (e.g., PowerShell, Bash, Python) to improve monitoring and response.

Cloud & SaaS Security

• Support security and compliance controls in Azure AD, Office 365, and key SaaS platforms.
• Implement and monitor access controls, DLP policies, and secure configurations for cloud and SaaS solutions.
• Collaborate with IT and Engineering on secure deployment and integration of new applications.

Risk Management & Security Governance

• Participate in third-party and vendor risk reviews; contribute to risk assessments and audits.
• Support the development and maintenance of security policies, procedures, and runbooks.
• Track vulnerabilities (OWASP, CVSS), prioritize remediation with risk-based approaches, and maintain an up-to-date inventory of assets.

Collaboration & Communication

• Engage proactively with peers and stakeholders across security, engineering, and business teams.
• Deliver clear, actionable communication on risks, incidents, and security posture—tailored to both technical and non-technical audiences.

• Experience with scripting (PowerShell, Bash, Python).
• Experience with SIEM (Microsoft Sentinel)
• Certifications: CompTIA Security+, Microsoft Certified: Security Operations Analyst Associate, or similar.
• Exposure to security governance, risk management, and vendor risk processes.
• Knowledge of security operations in a distributed, remote-first environment.