Senior Cyber Security Architect/Engineer/Incident Responder
Posted 1 day 21 hours ago by Stott and May
Job Title: Senior Cyber Security Architect/Engineer/Incident Responder - Financial Services
About the Role:
We are seeking a highly skilled and experienced Senior Cyber Security professional to join our team within the financial services sector. The ideal candidate will be a self-driven, full-fledged cyber security expert with a T-shaped skill set, capable of handling responsibilities ranging from deep-level technical analysis to high-level security management and secure system design, with a specific understanding of the unique challenges and regulatory requirements of the financial industry. This individual will possess a unique ability to analyze intricate details while maintaining a comprehensive understanding of the broader security landscape.
Responsibilities:
- Design, implement, and maintain secure systems and architectures, ensuring compliance with financial industry regulations (e.g., GDPR, PCI DSS, etc.).
- Conduct in-depth malware analysis and reverse engineering.
- Perform security risk assessments, gap analyses, and security audits, with a focus on financial risk models and frameworks.
- Develop and implement security automation and orchestration solutions (e.g., Azure Sentinel, XDR, KQL, Logic Apps).
- Manage and improve SOC/CSIRT processes, with specific protocols for handling financial data breaches and incidents.
- Lead incident response and management activities, including forensic analysis and reporting to regulatory bodies.
- Develop and implement detection engineering strategies and threat hunting activities, tailored to identify financial fraud, unauthorized transactions, and other sector-specific threats.
- Oversee vulnerability assessment and remediation processes, prioritizing systems critical to financial operations.
- Utilize and manage ServiceNow SecOps Suite, including development and customization to support financial security workflows.
Technical Skills and Experience:
- Extensive experience in security architecture, system design, and implementation within the financial services industry.
- Proven expertise in incident response, management, and threat hunting, with a focus on financial crime and cyber threats.
- Deep understanding of security automation and orchestration tools and techniques.
- Strong knowledge of vulnerability assessment and remediation.
- Experience with security tools such as Azure Sentinel, XDR, KQL, Logic Apps, and ServiceNow SecOps Suite.
- Proficiency in malware analysis and reverse engineering.
- Familiarity with SOC/CSIRT processes.
- Strong understanding of financial industry regulations and compliance requirements.
Certifications (Preferred):
- GIAC Cloud Forensics Responder (GCFR)
- Certified in Risk and Information Systems Control (CRISC)
- Certificate of Competence in Zero Trust (CCZT)
- CISM, CISA, CCSP, CISSP, GREM, GCFA, GDSA, GDAT, GPEN, GCIH, CEH, ISO27001 Lead Auditor
Education:
- Bachelor's degree in Computer Science or a related field.
Personal Attributes:
- Strong analytical and problem-solving skills.
- Excellent communication and coaching skills.
- Ability to work independently and as part of a team.
- Detail-oriented with a focus on the bigger picture.
- High level of integrity and understanding of the ethical considerations within the financial sector.