Security Operations Analyst (Fintech)

Location: London, UK; hybrid with office attendance 2–3 days per week. Working from abroad is available for up to 120 days per year, subject to having the right to work in the country of choice.

Company

hirify.global is a UK fintech company operating peer-to-peer lending and banking services.

What you will do

• Review, triage and investigate security alerts, events and incident tickets.
• Analyse security logs to identify suspicious activity, assess impact and determine next steps.
• Investigate phishing, malware and account-compromise threats and follow incident-response playbooks.
• Maintain investigation notes, ticket updates and incident documentation within defined response and resolution expectations.
• Collaborate with IT Services, Identity and Access Management, engineering, fraud and customer service teams.
• Use and improve security tooling, vulnerability management and cloud-security practices, including peer reviews and incident retrospectives.

Requirements

• Practical experience in security operations or a relevant technical environment such as infrastructure, networking, cloud operations or IT support.
• Understanding of cybersecurity fundamentals, including phishing, malware, account compromise, vulnerabilities, threats and risks.
• Experience reviewing security alerts or analysing logs to investigate unusual activity.
• Knowledge of the incident-response lifecycle and ability to follow documented procedures.
• Foundational knowledge of Windows, macOS, Linux and core networking concepts.
• Basic cloud knowledge, particularly AWS IAM, S3 and CloudTrail.
• Analytical investigation skills, including gathering evidence and assessing potential impact before deciding on action.
• Clear communication, accurate documentation, appropriate escalation, ticket prioritisation and time management within agreed service levels.
• Curiosity, willingness to learn, comfort asking for support and commitment to collaborative work.

Nice to have

• Experience with SIEM, EDR or security tools such as Splunk, SentinelOne, Netskope, Mimecast, Tenable or AWS GuardDuty.
• Basic scripting with Python, Bash or PowerShell.
• Practical phishing-investigation or vulnerability-management experience.
• Familiarity with MITRE ATT&CK and Git or other version-control systems.
• Experience in financial services, fintech or another regulated environment.
• Awareness of FCA requirements and UK GDPR.
• CompTIA Security+, CySA+, CEH or a relevant degree.
• Experience safely using AI tools to support everyday work.

Culture & Benefits

• Permanent employee position with a hybrid working model and emphasis on face-to-face collaboration and work-life balance.
• Option to work from abroad for up to 120 days per year, subject to the right to work in the chosen country.
• Collaborative Security Operations team with peer knowledge sharing and development support.
• Inclusive workplace with a diversity, equity and inclusion forum and reasonable-adjustment support.
• AI is part of everyday work, with transparent rules for its use during behavioural, competency-based and technical interviews.

Hiring process

• Do not use AI during behavioural and competency-based interviews.
• AI use in technical interviews depends on the role; the Talent Partner will explain the expectations for each stage.
• Where AI is allowed in a technical assessment, explain the tools selected, reasoning and decisions, not only the outcome.