Senior Security Analyst – Cloud & Incident Response

About the role

We are seeking a Senior Security Analyst to strengthen our security operations and protect our fintech platform that handles real money, assets and users. You will work in a fast‑paced environment, monitoring threats, responding to incidents and ensuring our AWS cloud remains resilient.

Key responsibilities

• Monitor security events and alerts across infrastructure and applications, triage and escalate incidents promptly.
• Lead incident response from detection through containment, remediation, root‑cause analysis and post‑mortem documentation.
• Perform digital forensics on compromised systems, logs and artifacts to uncover attacker behavior and entry vectors.
• Operate and improve SOC capabilities by tuning detection rules, reducing false positives and creating runbooks.
• Assess and harden AWS cloud security, identifying misconfigurations, excessive permissions and exposure risks.
• Collaborate with engineering to embed security controls into CI/CD pipelines, container workloads and infrastructure‑as‑code.
• Stay up‑to‑date with fintech, crypto and Latin America threat intelligence and translate insights into actionable improvements.
• Support audits, vulnerability management and policy enforcement together with Technology and Compliance teams.

Required profile

• 5+ years of experience in security operations, incident response or a related field.
• Strong fundamentals in security concepts and hands‑on experience with SIEM platforms and log analysis.
• Solid understanding of the incident response lifecycle and experience conducting digital forensics on Linux or cloud‑native environments.
• Good knowledge of networking fundamentals (TCP/IP, DNS, HTTP/S, firewalls, VPNs).
• Familiarity with AWS security services such as CloudTrail, GuardDuty, Security Hub, IAM and VPC.
• Ability to script in Python, Bash or similar for automation.

Required skills

• SIEM platforms
• Log analysis
• Incident response
• Digital forensics (Linux, cloud)
• Networking (TCP/IP, DNS, HTTP/S, firewalls, VPNs)
• AWS security services (CloudTrail, GuardDuty, Security Hub, IAM, VPC)
• Python scripting
• Bash scripting