Senior Security Operations Analyst (Detection & Response)
About this role
Engineering detections, automating incident response, and hardening cloud and SaaS estates form the core daily work for this position. Point Digital Finance is expanding its information security function and bringing in its first dedicated monitoring and response hire to partner directly with the security lead. Individuals in this role will engineer detections, build automated response workflows, run vulnerability management, and shape a modern detection and response practice from an early-stage footing.
Operating in a regulated consumer-finance environment, the person who joins will share an on-call rotation and own problems end to end with significant autonomy. Ideal candidates enjoy building systems as much as responding to threats, possess strong SIEM and cloud security skills, and thrive in a collaborative remote environment with a preference for occasional in-person connection near the Palo Alto headquarters.
What you will do
- Share a 24/7 on-call and incident-response rotation with the security lead to triage, investigate, and contain security alerts.
- Build and maintain incident-response runbooks, escalation paths, and post-incident reviews.
- Author, tune, and maintain SIEM detections, correlation rules, dashboards, and reporting across cloud and identity log sources.
- Reduce false positives, close coverage gaps, and onboard new log sources to eliminate detection blind spots.
- Run day-to-day vulnerability management by prioritizing findings, coordinating remediation, and reporting on risk reduction.
- Develop detection-as-code and lightweight automation or SOAR workflows to make common alerts self-triage.
- Produce recurring security metrics for leadership and supply control evidence for audits.
- Utilize AI and LLM tooling to accelerate investigation, correlation, and detection engineering.
What you need
- Bring 5 or more years of experience in security operations, incident response, SOC, or detection engineering.
- Demonstrate hands-on experience running or actively participating in an on-call and incident-response rotation independently.
- Possess strong SIEM skills for authoring and tuning detections, correlation rules, and dashboards.
- Show practical cloud security experience in AWS and Google Workspace, including identity and log sources.
- Prove the ability to investigate and contain incidents end to end such as phishing, account takeover, and cloud threats.
- Have working knowledge of vulnerability management and experience coordinating remediation with engineering teams.
- Demonstrate scripting and automation abilities using Python or similar languages for detection-as-code and SOAR workflows.
- Maintain clear written and verbal communication skills to produce runbooks, metrics, and audit-ready documentation.
Nice to have
- Hands-on experience using AI/LLMs for security analysis, investigation, and alert engineering
- Experience in a regulated financial-services or fintech environment such as GLBA, NYDFS Part 500, or SOC 2
- Relevant certifications including GCIA, GCIH, GCED, GIAC, CySA+, Security+, or AWS Security Specialty
- Experience standing up detection and response practices from an early or greenfield state
Benefits
- Comprehensive medical, dental, and vision plans with FSA and HSA options
- Unlimited paid time off and 10 company holidays
- Fully paid parental leave supplemented with additional transition time
- Meaningful equity stake in the company
- 401K retirement plans, guaranteed life insurance, and disability coverage
- Monthly stipends for internet, mobile plans, wellness perks, and a home office reimbursement
Skills and tech stack
Questions candidates ask
What is the remote work policy for this role?
This is a remote position where employees can work from anywhere in the U.S., specifically residing in one of Point’s states of operation. While remote, candidates located near the Palo Alto headquarters are preferred and have opportunities to connect with colleagues in person approximately once per week.
What is the salary range for this position?
The expected annual base salary for the San Francisco Bay Area, New York, and Seattle tier is $151,050 to $166,950. Final compensation is determined by skills, experience, location, and interview performance.
What does the on-call commitment look like?
The person in this role will share a 24/7 on-call and incident-response rotation with the security lead. Candidates must be able to participate in an off-hours on-call rotation.
What tools and technologies will I be working with?
You will engineer detections and maintain SIEM dashboards using tools like Coralogix, Splunk, Elastic, or Microsoft Sentinel. The stack also includes practical cloud security in AWS and Google Workspace, Python for scripting and automation, and AI/LLM tooling for investigation and detection engineering.
The application is on the official Point Digital Finance, Inc. careers page.
Apply on company site