• Strong experience as a Security Analyst, SOC Analyst (Tier 2+), or Security Operations professional.
• Hands-on experience with cloud security monitoring — GCP preferred; AWS/Azure acceptable.
• Experience with IAM and identity security, including Okta, Azure AD, MFA, and authentication protocols.
• Proven experience in vulnerability management and remediation coordination.
• Experience with SIEM/SOAR platforms and security log analysis.
• Experience working in regulated environments, preferably PCI-DSS, SOC 2, or financial services.

Technical Skills

• Cloud Security: GCP Security Command Center, Cloud Monitoring, IAM, Cloud Logging.
• Identity Security: Okta, MFA, authentication and authorization protocols.
• Endpoint Security: Windows Security Events and scheduled task analysis.
• Vulnerability Management: Rapid7 Nexpose/InsightVM, Qualys, Nessus, CVSS, patch management.
• Application Security: OWASP Top 10 and SAST/DAST tools.
• Ticketing & Documentation: JIRA/Atlassian and Confluence.

Required Knowledge

Strong understanding of:

Threat Detection & Analysis | Incident Response | Network Security | IAM | Malware Analysis Fundamentals | Security Architecture | Vulnerability Management

Knowledge of PCI-DSS, SOC 2, NIST Cybersecurity Framework, and CIS Benchmarks.

Good to Have

• Experience with Orca Security.
• Knowledge of Kubernetes/GKE security.
• Familiarity with Terraform and Infrastructure-as-Code security.
• Experience in financial services or cryptocurrency security.
• Third-party risk management (TPRM) experience.
• Relevant certifications such as Security+, CySA+, CISSP, GIAC, or Google Cloud Professional Cloud Security Engineer.

Soft Skills

Analytical Thinking | Communication | Collaboration | Time Management | Attention to Detail | Continuous Learning

Tools

GCP | Okta | Orca Security | Rapid7 Nexpose/InsightVM | JIRA | Confluence | Windows Event Viewer | Workday