Senior SOC Analyst

Flex Trade Systems is a provider of customized multi‑asset execution and order management trading solutions for buy‑and sell‑side financial institutions. Through deep client partnerships with some of the world’s largest, most complex and demanding capital markets firms, we develop flexible tools, technology and innovation that deliver our clients a competitive edge. Our globally distributed engineering teams focus on adaptable technology and open architecture to develop highly sophisticated trading solutions that can automate and scale with your business strategies.

At Flex Trade, we hold our values close to heart, with pride and gratitude, as they guide us in everything that we do. We are dedicated to giving our clients a competitive edge, taking ownership of our responsibilities, being flexible to adapt to ever‑changing environment and technology, bringing integrity to every interaction and we continue to improve, grow together and collaborate as one team.

All of these while having Fun truly makes Flex Trade a wonderful place to work.

We are looking for a technically sharp and driven Senior SOC Analyst to join our cybersecurity team. You will serve as a key individual contributor within the Security Operations Center, owning day‑to‑day detection, analysis, and response activities while contributing to vulnerability management and purple team exercises. This is a hands‑on, practitioner role — you will spend most of your time in the work, not managing it.

You will collaborate closely with peers, IT, and engineering teams to identify and contain threats, reduce attack surface, and continuously sharpen our defensive capabilities. The position is primarily on‑site (4 days per week at our offices) with one remote day per week.

• Monitor, triage, and investigate security alerts across SIEM, EDR, NDR, and cloud platforms, escalating to the SOC Lead as appropriate.
• Respond to security incidents end‑to‑end: initial triage, containment, eradication, recovery, and post‑incident documentation.
• Execute and help maintain incident response playbooks and runbooks, flagging gaps and recommending improvements.
• Conduct root cause analysis following incidents and contribute findings to post‑incident reviews.
• Produce clear, accurate incident reports suitable for both technical and non‑technical audiences.
• Participate in on‑call rotation and be available to respond to high‑severity incidents outside of business hours when required.

• Perform vulnerability scans and assessments using tools such as Tenable, Qualys, or Rapid7 on a scheduled and ad‑hoc basis.
• Analyze and prioritize vulnerabilities using CVSS scores, threat intelligence, and asset criticality to guide remediation efforts.
• Track and follow up on remediation progress with IT and engineering teams, escalating stalled items as needed.
• Contribute to vulnerability reporting, capturing trends, patch compliance rates, and risk reduction metrics.
• Stay current on newly disclosed CVEs and exploit trends, advising on risk‑based prioritization.

• Participate in purple team exercises alongside red team operators to validate detection and response capabilities.
• Map adversary techniques to the MITRE ATT&CK framework and use exercise findings to identify detection gaps.
• Write and tune SIEM detection rules, correlation queries, and alerts based on adversary TTPs and purple team outcomes.
• Conduct threat hunting exercises using hypothesis‑driven and ATT&CK‑aligned methodologies to surface undetected threats.
• Track emerging threat actor activity and incorporate relevant TTPs into detection logic and hunting campaigns.

• Analyze…