Information Security Sr Analyst

Who We Are:

Apex Fintech Solutions (Apex) powers innovation and the future of digital wealth management by building tech-forward solutions that simplify, automate, and facilitate access to financial markets for all. Our robust suite of fintech software enables us to support clients such as Stash, Betterment, SoFi, Webull, and eToro, amongst many others; collectively, Apex powers access to the stock market for over 22+ million end customers.

The Senior SOC Analyst will be responsible for day-to-day security threats, vulnerability management, analysis, and response. You will manage security incidents, review security alerts, determine if the security events are false positives, true positives, or false negatives, and work with incident responders on known or suspected security threats. The role requires deep analytical skills for threat detection and response, as well as technical engineering abilities to build, enhance, and automate security tools and processes.

The Senior SOC Analyst will lead complex security investigations, develop automation solutions, and contribute to the strategic improvement of our security posture.

• Responsible for working in Security Operation Center (SOC) team environment.
• Monitor, analyse, investigate security incidents and events using SIEM, UEBA, Threat Intel and EDR.
• Perform security incident and event correlation, analysis, triage using information gathered from a variety of sources within the enterprise.
• Generate reports, dashboards, and presentations from security technologies.
• Point of conduct for Tier 1 & Tier 2 escalations for in-depth investigations of events.
• Able to participate in an on-call rotation.
• Provide analysis of trending security data from a large number of heterogeneous security devices across different layers.
• Provide Incident Response (IR) support when analysis confirms an actionable incident.
• Communicate and collaborate with stakeholders, including internal customers and senior management to provide updates on security incidents and to ensure proper resolution.
• Investigate, document, and report on information security threats and emerging trends.
• Integrate technologies and share information with SOC analysts and external teams.
• Participate in internal projects and initiatives to increase SOC efficiency and improve SOC tooling.
• Improve and challenge existing processes and procedures in an agile and fast-moving environment.
• Maintain and update security documentation, including incident reports and KB articles.
• Provide technical expertise, team member mentoring and advice to other departments.
• Perform advanced threat hunting activities using custom queries, behavioral analysis, and threat modeling frameworks.
• Develop and maintain security dashboards, metrics, and executive-level reporting.
• Develop and maintain security tools, playbooks, and SOAR workflows to improve SOC efficiency.

• The permanent right to live and work in the United Kingdom – the role is based in Belfast, Northern Ireland.
• Bachelor’s degree in a related field (Security, Forensics, Cyber Security, or Computer Science) or equivalent industry related experience.
• At least 5 years of experience working within an information security / cyber security role.
• Desirable:
  Proven experience as a security analyst, incident handler/responder, security engineer, or penetration tester.
• Knowledge of security methodologies, processes (Cyber Kill Chain, Diamond Model, MITRE ATT&CK/D3
  
  FEND framework).
• Knowledge of technical security solutions such as firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavioural analytics, orchestration, automation and cloud security.
• Deep knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS, HTTP Protocols, network analysis, and network/security applications and email security.
• Good knowledge of common malware threats and attack methodologies.
• Good knowledge of scripting and programming languages (Power Shell, Python, Bash, .NET, Ruby, Java, C, etc.).
• Experience with Infrastructure as Code.
• Desirable Professional
  
  Certifications:
  
  GCIA, GCIH, GCFE, GCFA, Security+, CCNA Cyber Ops, OSCP, GPEN, GWAPT, CEH, CySA+.

• Acco…