Security Operations Engineer (Fintech)

Location: Remote - Americas; North America

Company

hirify.global is a US-headquartered fintech company providing brokerage infrastructure and developer-friendly APIs for stocks, ETFs, options, crypto, fixed income, and 24/5 trading. Its licensed financial services subsidiaries serve financial institutions across 40 countries.

What you will do

• Operate and continuously improve SIEM and SOAR capabilities, including log onboarding, parsing, normalization, data quality checks, and detection coverage.
• Build, test, tune, enrich, and manage detection rules based on threat intelligence, incident learnings, and emerging attack techniques mapped to MITRE ATT&CK.
• Maintain operational dashboards for alert volume, ingest health, and response status, while tracking MTTD and MTTR.
• Support incidents through evidence collection, detection queries, containment actions, alert triage, and investigations across endpoint, identity, cloud, network, and application environments.
• Develop runbooks, escalation paths, and SOAR playbooks for enrichment, containment, ticketing, and notification.
• Conduct hypothesis-driven threat hunts and participate in the security operations on-call rotation after onboarding and cross-training.

Requirements

• 3+ years of experience in Security Operations or detection engineering roles.
• Hands-on experience operating and tuning a SIEM and building SOAR playbooks or equivalent response automation.
• Experience onboarding and parsing log sources from cloud, identity, and SaaS platforms.
• Strong alert investigation skills across identity, endpoint, network, and cloud environments.
• Working knowledge of Linux and scripting or automation with Python or Bash for security operations tasks.
• Understanding of common attacker techniques and detection methodologies.
• Experience supporting security incidents, including evidence collection, detection queries, and containment.
• Strong written and verbal communication, especially during incidents; able to work cross-functionally and handle escalations calmly and decisively.
• Willingness to participate in an on-call rotation.

Nice to have

• Experience securing financial, trading, or other highly regulated platforms.
• Familiarity with SOC 2 or ISO 27001 compliance frameworks.
• Experience with detection-as-code, GitOps, and CI/CD pipelines.
• Knowledge of AWS, GCP, or Azure security logging and SaaS security telemetry.
• Familiarity with Kubernetes-hosted security tooling or a managed SOC/MSSP.
• Security certifications such as GCIA, GCIH, GCED, or similar.
• Ability to balance security rigor with operational efficiency and business needs.

Culture & Benefits

• Work with a 100% distributed and remote Security Team.
• Collaborate with Security, IT, DevOps, Engineering, external partners, and the Enterprise Security Architect.
• Competitive salary and stock options.
• Health benefits.
• One-time USD $500 home-office setup allowance and USD $150 monthly stipend via a Brex Card.