Security Operations Center Architect

A successful startup in the Fintech sector that is establishing a digital bank, aiming to operate both locally and globally with an innovative and unique model. Their products will differ significantly from existing market offerings, providing substantial value to customers.

This will be the first bank to develop its entire technology, end-to-end from scratch, all based on 100% cloud infrastructure.

In December 2022, they obtained a banking license from the Israeli banking authorities, with plans to launch and enter the market in 2024. The company develops a variety of cloud-based Software as a Service (SAAS) products, including applications for end-users and a back-office system for banks.

Financially strong and stable, the company has consistent investments accompanying them from the outset. This new and unique role, reporting to the Chief Information Security Officer (CISO), involves establishing a Security Operations Center (SOC) within the company. Responsibilities include monitoring and operating information security events, investigating incidents, and responding to them.

Located in Tel Aviv (near the railway line). The company operates on a hybrid model with up to three days of remote work. Currently employing around 55 people, the company is experiencing significant growth.

SKILLS & KNOWLEDGE

• Demonstrated experience in creating playbooks and automating workflows using SOAR solutions

• Integrating data sources, creating alerts, and performing investigations using SIEM tools

• Developing detailed documentation for IR playbooks and executing them.

• Manage and coordinate cyber incident processes with the SOC team.

• Conduct in-depth analysis of security events and incidents to identify the root cause and scope.

• Operate and maintain the SIEM system including fine tuning to optimize detection and response capabilities.

• On-demand threat-hunting activities on cloud environments and SaaS applications.

• On-demand Incident response mitigation for incidents raised by our SOC team.

• Research new attack vectors, including identification, and related mitigations across the enterprise IT landscape.

• Be a knowledge source for new and emerging threats, incident response processes, and threat-hunting activities.

• Evaluate & recommend new security technologies and help shape the product with your insights and expertise.

• On-call availability off working hours.

Requirements-

• 7 years of experience in hands-on threat hunting and incident response in complex, security organizations.

• Hands-on experience in threat hunting and incident response on cloud environments (AWS) and SaaS products.

• Hands-on experience in SIEM technologies.

• Strong knowledge in security technologies such as XDR, CSPM, WAF, FW etc.

• Familiarity with common cloud and SaaS attack vectors and misconfigurations.

• Solid understanding of the cyber security kill chain (MITRE ATT&CK/D3FEND), identifying