Cyber Security and Forensic Analyst

About the role

A FinTech organisation is looking for a highly skilled Cyber Security and Forensic Analyst to protect its digital assets, financial systems and customer information. The role covers monitoring, detecting, investigating and responding to cyber threats, and conducting digital forensic investigations to find the root cause of security incidents. It sits within a dynamic FinTech environment and calls for expertise in cybersecurity operations, incident response, digital forensics, threat intelligence, vulnerability management and regulatory compliance.

Key responsibilities

• Cyber security operations: monitor events with SIEM tools, detect and respond to threats, hunt threats, run vulnerability assessments, support penetration testing, and maintain dashboards and reports
• Digital forensics: acquire and preserve evidence, analyse malware, ransomware and phishing, write forensic reports, maintain chain of custody and support fraud investigations
• Incident response: take part in the incident lifecycle, do root cause analysis, coordinate containment and recovery, write playbooks and hold post-incident reviews
• Governance, risk and compliance: ensure regulatory compliance, support audits, help write security policies and maintain security documentation
• Threat intelligence: track IOCs and IOAs, analyse threat feeds and share intelligence with stakeholders
• Security awareness: deliver training on phishing, social engineering and secure computing and promote a security culture

Required profile

• Bachelor's degree in Cyber Security, Computer Science, Information Technology, Digital Forensics, Information Systems or a related field
• At least 6 years of experience in cybersecurity, digital forensics or incident response, preferably in financial services or FinTech
• Demonstrated experience investigating incidents and performing forensic analysis
• Analytical, investigative and problem-solving mindset, attention to detail, excellent communication, ability to work under pressure and high ethical standards

Required skills

• Network security, digital forensics, incident response, malware analysis, cloud security (AWS, Azure or Google Cloud), EDR, IAM and vulnerability management
• Windows, Linux and macOS; TCP/IP, DNS, HTTP, SMTP, VPNs and firewalls
• Scripting with Python, PowerShell or Bash
• Preferred: Microsoft Sentinel, Splunk, IBM QRadar, Microsoft Defender, CrowdStrike Falcon, Palo Alto Networks, Fortinet, Cisco, Wireshark, Autopsy, EnCase, FTK, Volatility, Cellebrite
• Preferred certifications: CISSP, CEH, GCIH, GCFA, CCE, CISM, CompTIA Security+, CompTIA CySA+, CHFI