Senior Security Analyst III
OppLoans · United States
About this role
**Senior Security Analyst III — OppFi** ## About the job OppFi is a tech-enabled digital finance platform working with banks to provide financial products and services for everyday Americans. As a **Senior Security Analyst III**, you’ll be a key contributor to day-to-day security operations—supporting **threat monitoring, incident triage, and vulnerability remediation**—and partnering with senior team members and internal stakeholders to maintain **security, visibility, and compliance**. ## What you get to do ### Security Operations & Incident Response - Monitor security alerts from tools such as **SIEM, EDR, and cloud logs** and help triage potential incidents by gathering initial data and escalating as needed. - Assist with execution of **security incident response playbooks** (investigation, containment, and documentation). - Document and track security incidents to support **audit and compliance** requirements. - Support SIEM monitoring/logging strategy by helping configure and tune **SIEM alerts and reporting**. - Perform regular log review and analysis for suspicious activity under senior guidance. - Learn to deploy/manage new security tools and assist with developing basic **threat detection logic**. ### Vulnerability Management & Posture Improvements - Support day-to-day vulnerability tracking, including moving from standard **CVSS** tracking to **exposure and exploitability-based risk assessment**. - Identify potential **IT control risks** and opportunities, providing sustainable recommendations that address root causes. - Assist with reporting to measure the effectiveness of security controls. ### Process Improvement & Collaboration - Contribute to development and maintenance of operational **security playbooks and documentation**. - Collaborate to transition manual workflows into automated playbooks/processes. - Perform other related duties as assigned. ## What you will bring to the team - **Bachelor’s degree** in Cybersecurity, Computer Science, or equivalent experience. - **3–5 years** of professional experience in Information Security with demonstrated expertise in at least one of: - **Security Operations** - **Incident Response** - **Vulnerability Management** - Experience with security/control frameworks such as **FFIEC, NIST, COBIT, ITIL, ISO**. - Hands-on experience with one or more of: - **EDR** (e.g., CrowdStrike, Defender for Endpoint, SentinelOne) - **SIEM/SOAR** (e.g., Sumo Logic, Splunk, Chronicle, Azure Sentinel, Google SecOps) - **CSPM** (e.g., Wiz, Prisma, Orca) - **Vulnerability management** (e.g., Qualys, Tenable, Rapid7) - **Next-gen firewalls** (e.g., Cisco FMC, Palo Alto Panorama, FortiGate) - Strong understanding of **attack techniques (MITRE ATT&CK)**, incident triage, and remediation workflows. - Foundational knowledge of **AWS** or other cloud environments. - Strong networking and operating systems knowledge (**Linux/Windows**) and security principles (e.g., **least privilege, defense-in-depth**). - Familiarity with **API integrations, scripting,** and/or SOAR automation (e.g., Cortex, Google SecOps, Splunk SOAR). - Strong written communication for procedures/playbooks and verbal communication for technical findings. - Experience building **dashboards and metrics** for leadership visibility. - Strong analytical/problem-solving skills and attention to detail. - Preferred: certifications such as **CompTIA CySA+, GCIH, GCIA, GMON, GCDA, GSOC, CISSP (associate)**. - Preferred: firewal
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.