Senior Security Analyst (Fintech)

Location: New York City, New York, US; remote. New York, NY (hybrid).

Salary: $142,875–$170,910 annually for NYC, with compensation varying by US geographic market, experience, knowledge, and skills.

Company

hirify.global is a banking infrastructure platform and API-first partner bank that provides compliant, programmable payments, lending, and digital asset services for fintech companies.

What you will do

• Build, tune, and maintain SIEM detection rules and alerts; write queries aligned to MITRE ATT&CK and identify coverage gaps.
• Own incident response from containment through eradication, recovery, lessons learned, forensic log analysis, and post-incident reporting.
• Monitor and investigate telemetry from endpoints, AWS cloud infrastructure, identity systems, networks, applications, and data pipelines.
• Manage log ingestion, parsing, normalization, enrichment, and routing to provide high-fidelity data for detection and investigation.
• Triage vulnerability findings, prioritize remediation using risk-based frameworks, and track remediation SLAs with IT and Engineering.
• Support security audits and regulatory examinations, review IaC and CI/CD security, maintain runbooks and playbooks, and partner with security engineers and hirify.globalership.

Requirements

• 5+ years of experience in information security or security operations.
• Hands-on SIEM experience, including query writing, detection building, and alert tuning.
• Strong knowledge of cloud security concepts and services, with AWS preferred; GCP and Azure are also considered.
• Proficiency working with endpoint, cloud, network, identity, and application logs.
• Understanding of CI/CD pipelines and IaC from a security perspective, including Terraform and CloudFormation.
• Solid understanding of Windows, macOS, and Linux internals, including processes, persistence mechanisms, and attacker TTPs.
• Demonstrated incident response experience, including hirify.globaling or contributing to investigations.
• Familiarity with data normalization, log parsing, and ETL concepts.
• Strong written and verbal communication skills.

Nice to have

• Experience with log routing, transformation, and enrichment.
• Hands-on experience with enterprise EDR/XDR platforms and related SOAR, exposure management, and identity protection tooling.
• Experience with network security tools and interpreting proxy or web traffic logs.
• Background in financial services or healthcare and familiarity with NIST CSF, GLBA, or FFIEC.
• Scripting or automation experience with Python or Bash, detection engineering, workflow automation, and version-controlled code in GitHub.
• Relevant certifications such as CISSP, GCIH, GCIA, GCED, CEH, GDSA, or equivalent.
• Detection as Code experience using version-controlled detection content.
• Exposure to identity security tooling.

Culture & Benefits

• Collaborative security team focused on creative problem-solving, ownership, and continuous improvement.
• Medical, dental, vision, life insurance, 401k matching, and wellness benefits including FSA, HSA, and HRA.
• Paid parental leave.
• Flexible vacation policy, PTO, and paid holidays.
• Career growth opportunities in a dynamic banking and fintech environment.