Cybersecurity Operation Analyst

This is a hands-on, operations-focused role for someone who wants to own recurring security workflows end to end, partner closely with the infrastructure and security team, and grow into broader responsibilities over time., * Run vulnerability management and patching: track findings to closure, prioritize remediation, and report on progress.

• Conduct periodic user and privileged access reviews and help maintain least-privilege access across systems.
• Support identity and access management (IAM) operations, including provisioning, deprovisioning, and access policy enforcement.
• Handle day-to-day security operations, monitoring, and routine investigations.
• Manage security awareness training and phishing simulation programs and follow up on results.

• 3-5 years in an infrastructure or security role.
• Experience in financial services is a plus.
• Demonstrated ability to manage and prioritize multiple tasks and deadlines.
• Hands-on experience with our security stack or comparable tools that transfer readily. Our environment includes the Microsoft security stack (Entra ID, Intune, Sentinel), cloud platforms (Azure and AWS), a SASE/SWG (Netskope), MFA (Duo), and endpoint and asset management tooling.
• Familiarity with vulnerability scanners, SIEM, endpoint protection, and identity and access management tooling.
• Working knowledge of AI and AI security concepts and their application to a security program.
• Cloud security operations (CloudSecOps) experience.
• Source control and pipeline security operations (GitSecOps) experience.
• Solid understanding of core security concepts: network protocols, firewalls, common attack vectors, and risk.
• Professional certifications such as CompTIA Security+, CISM, or CISSP are a plus.