Job description

Directs Security Operations Center (SOC) activities including monitoring, triage, and escalation to ensure continuous protection of fintech and corporate infrastructure.

Oversees end-to-end incident response phases (detection to recovery) to minimize the impact of cyber threats on payment systems.

Coordinates incident response workflows across internal teams and external stakeholders to ensure a unified and rapid organizational defense.

Architects incident response playbooks and operational procedures to standardize security actions and improve response consistency.

Develops advanced detection rule sets and security anomaly patterns to enhance the organization's proactive defense capabilities.

Establishes a comprehensive cyber threat intelligence capability to integrate indicators of compromise (IOCs) into active detection systems.

Executes proactive threat hunting across endpoints and cloud environments to identify and neutralize hidden security risks.

Governs enterprise-wide vulnerability management and remediation tracking to ensure critical payment platforms remain secure and patched.

Analyzes operational security metrics to provide senior leadership with actionable reporting on the organization's defensive posture.

Leads and mentors SOC analysts and threat responders to foster a high-performing team culture focused on operational excellence.

Skills description

Interpersonal skills

• Strong operational leadership and team management.
• Ability to lead teams during high-pressure cyber incidents.
• Excellent communication skills for technical and executive audiences.
• Strong decision-making and crisis management capabilities.
• Collaboration with engineering, fraud, and product teams.
• Ability to mentor and develop cyber defense professionals.

Technical skills

• Deep understanding of SOC operations and security monitoring processes.
• Experience operating SIEM, EDR, NDR, SOAR, and threat intelligence platforms.
• Strong knowledge of incident response methodologies and digital forensics.
• Experience with threat intelligence frameworks such as MITRE ATT&CK.
• Experience with vulnerability management tools and patch prioritization.
• Understanding of cloud security monitoring across AWS, Azure, or GCP.
• Knowledge of malware analysis and threat actor tactics, techniques, and procedures.
• Familiarity with security logging, detection engineering, and threat hunting techniques.

Professional experience

• 10+ years cybersecurity or security operations.
• Minimum 5 years managing SOC or security operations teams.
• Experience managing incident response programs and cyber crisis events.
• Experience implementing threat intelligence and threat hunting capabilities.
• Experience operating vulnerability management programs at enterprise scale.
• Experience working in fintech, banking, payments, or other regulated environments is highly desirable.

Management experience

• 5+ years.

Educational background

• Bachelor’s degree in Cyber Security, Computer Science, Information Technology or related field.
• Relevant certifications may include:
• CISSP – Certified Information Systems Security Professional
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Forensic Analyst (GCFA)
• Certified Ethical Hacker (CEH)
• Certified SOC Analyst (CSA)