- Company Name
- Chime
- Job Title
- Lead Analyst, Security
- Job Description
-
**Job title:** Lead Analyst, Security
**Role Summary:**
Lead a Security Operations Center (SOC) team, orchestrating incident detection, investigation, and response for network, host, and cloud environments. Drive the continuous improvement of security posture, threat intelligence, and IR capabilities while coordinating with engineering, fraud, and other cross‑functional stakeholders.
**Expectations:**
- Serve as a technical leader for the SOC, managing day‑to‑day operations and escalation.
- Execute incident response, root‑cause analysis, and recovery actions.
- Mentor and develop junior analysts.
- Contribute to program, policy, and tool enhancements.
- Collaborate on security objectives and OKRs.
**Key Responsibilities:**
- Monitor and analyze security events across on‑premises and cloud infrastructure.
- Investigate alerts using SIEM, endpoint detection, and threat intelligence platforms.
- Perform digital forensics, malware analysis, and incident triage.
- Coordinate response actions, containment, eradication, and recovery.
- Conduct threat hunting to identify adversary tactics, techniques, and procedures.
- Document findings, playbooks, and post‑mortems.
- Engage in red/blue/purple teaming and penetration testing exercises.
- Liaise with engineering, product, and fraud teams to remediate vulnerabilities.
- Maintain and evolve incident response frameworks (MITRE ATT&CK, Cyber Kill Chain, NIST).
- Support policy development and compliance initiatives.
**Required Skills:**
- 6+ years of cybersecurity experience, 4+ years in SOC/CSIRT environments.
- Proficiency with SIEM, SOAR, endpoint detection & response tools.
- Strong knowledge of network and host security, cloud security (IAM, VPC, Container).
- Hands‑on threat hunting, incident investigation, and digital forensics.
- Familiarity with MITRE ATT&CK, NIST, Cyber Kill Chain.
- Experience with network devices (routers, switches, firewalls) and cloud architectures.
- Excellent communication, teamwork, and mentoring abilities.
- Ability to manage multiple priorities and adapt to evolving threats.
**Required Education & Certifications:**
- Bachelor’s degree in Computer Science, Cybersecurity, Information Assurance, or related field.
- Certifications preferred: CISSP, CISM, GCIH, GIAC Security Analyst (GSEC), or equivalent.
- Cloud security certifications (AWS SysOps, Azure Security, GCP Security) are a plus.
San francisco, United states
Hybrid
Senior
17-03-2026