Sr InfoSec Analyst

Apex Fintech Solutions is a leading innovator in the fintech sector, leveraging advanced technology to power innovation and the future of digital wealth management. Our robust suite of fintech software enables us to support clients such as Stash, Betterment, SoFi, Webull, and eToro, collectively powering access to the stock market for over 22 million end customers.

At Apex, we are changing how the securities industry operates by digitizing and democratizing systems so that everyone has an opportunity to invest. When you're at Apex, you drive this change as part of a global team with a clear vision: to be the trusted technology that powers the digital economy.

ABOUT THIS ROLE

The Senior SOC Analyst will be responsible for day-to-day security threats, vulnerability management, analysis, and response. You will manage security incidents and review security alerts, determining if the security events are false positives, true positives, or false negatives, while working with incident responders on known or suspected security threats. The Senior SOC Analyst will work on log analysis, vulnerabilities and emerging threats, threat hunting, and incident response that adhere to best practices and recognized control frameworks while mentoring analysts and being their escalation point.

Responsibilities:

• Responsible for working in Security Operation Center (SOC) team environment.
• Monitor, analyse, investigate security incidents and events using various tools and technologies including SIEM, UEBA, Threat Intel, and EDR.
• Perform security incident and event correlation, analysis, triage using information gathered from a variety of sources within the enterprise.
• Generate reports, dashboards, and presentations from security technologies.
• Point of conduct for Tier 1 & Tier 2 escalations for in-depth investigations of events.
• Able to participate in an on-call rotation.
• Provide analysis of trending security data from a large number of heterogeneous security devices across different layers.
• Provide Incident Response (IR) support when analysis confirms an actionable incident.
• Communicate and collaborate with stakeholders, including internal customers and senior management to provide updates on security incidents and to ensure proper resolution.
• Investigate, document, and report on information security threats and emerging trends.
• Integrate technologies and share information with SOC analysts and external teams.
• Participate in internal projects and initiatives to increase SOC efficiency and improve SOC tooling.
• Improve and challenge existing processes and procedures in an agile and fast-moving environment.
• Maintain and update security documentation, including incident reports and KB articles.
• Provide technical expertise, team member mentoring, and advice to other departments.
• Perform advanced threat hunting activities using custom queries, behavioural analysis, and threat modelling frameworks.
• Develop and maintain security dashboards, metrics, and executive-level reporting.
• Develop and maintain security tools, playbooks, and SOAR workflows to improve SOC efficiency.

Core Qualifications:

• The permanent right to live and work in the United Kingdom - this job is based in Belfast, Northern Ireland.
• Bachelor’s degree in a related field (Security, Forensics, Cyber Security, or Computer Science is preferred) or equivalent industry-related experience.
• At least 5 years' experience working within an information security/cyber security role.
• Desirable: Proven experience as a security analyst, incident handler/responder, security engineer, or penetration tester.
• Knowledge of security methodologies, processes (i.e., Cyber Kill Chain/Diamond Models, and the MITRE ATT&CK/D3FEND framework).
• Knowledge of technical security solutions (such as but not limited to firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavioural analytics, orchestration, automation, and cloud security).
• Deep knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS, and HTTP Protocols, network analysis, and network/security applications and email security.
• Good knowledge of common malware threats and attack methodologies.
• Good knowledge of scripting languages and programming languages (PowerShell, Python, Bash, .NET, Ruby, Java, C, etc.).
• Experience with Infrastructure as Code.
• Desirable Professional Certifications: GCIA, GCIH, GCFE, GCFA, Security+, CCNA CyberOps, OSCP, GPEN, GWAPT, CEH, CySA+.

Culture & Core Values:

The Information Security Team is composed of independent thinkers and doers who can positively impact our clients and shape Apex Fintech Solutions business and security posture. The Information Security Team strives to build and maintain a collaborative environment and engaging work—guided by Open and Honest Communication; Teamwork and Collaboration; Involving Everyone; Leaders Who Serve; and Personal Accountability.

We offer 28 days annual leave plus 10 NI national holidays, pension matched up to 7%, private health insurance for medical and dental, life insurance, great work/life balance, and flexible working hours.

EEO Statement:

Apex Fintech Solutions is an equal opportunity employer that does not discriminate on the basis of race, colour, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, veteran status, marital status, or any other protected characteristic.

Disability Statement:

Apex Fintech Solutions is committed to creating an inclusive and accessible workplace for all candidates, including those with disabilities. We are dedicated to ensuring equal employment opportunities and providing reasonable accommodations to qualified individuals with disabilities.