Tyro

Security Analyst: Threat Detection &amp; Response

Zopa

Our Story Hello there. We’re Zopa. We began our journey in 2005 with the drive to deliver customer-first financial products. Fast forward to 2020, we shifted gears and became a digital bank, leveraging our customer knowledge, money expertise and technical agility to forge ahead. Our diverse team is united by a mission to create simple, fair and honest financial products that have the customers’ needs at their heart.  We’re regularly recognised at industry awards for our game-changing products and are proud to be one of the market leaders in consumer lending in the UK. But our work doesn’t stop there.   After securing £220 million in our 2021 funding round led by SoftBank, we’ve entered the next stage in our journey. So far, we’ve lent out over £6 billion and made money work better for over half a million people across the UK who were looking to borrow or save with us. In less than 2 years after becoming a bank, we hit £1 billion in customer deposits and we’re also a top 5 credit card issuer in the UK. And this is just the beginning. We’re set on achieving big things with ambitious growth targets to match. This means there's a range of opportunities for you to excel and develop through a career at Zopa, while building better banking products that truly matter to our customers.     If you embrace unconventional challenges, are unafraid to think differently and are driven to make an outsized impact, you’ll thrive here at Zopa. For a closer look at our culture, check out <a href="https://www.youtube.com/watch?v=e5ek2PQ-DhE" rel="noopener noreferrer nofollow ugc" target="_blank">our latest video here</a>. And if you want to join us, have a look at <a href="https://www.zopa.com/about/careers" rel="noopener noreferrer nofollow ugc" target="_blank">our current open roles</a>!What's the challenge? The ZRE Security team are part of Zopa Reliability Engineering (ZRE) and are responsible for ensuring our Platform &amp; Infrastructure is secure, and meets the controls required in a regulated environment. As a Cloud Security Engineer, you will be an owner for ZRE security work, whilst helping ZRE to maintain a strong security posture. This includes proactively aligning our platform/infrastructure with our InfoSec policies and standards, whilst defining work for remediation and improvement. You will be a champion for Security both within the ZRE team and in the wider business, helping to encourage a security mindset in everything we do. All the while automating consistently and helping to design and support the technology infrastructure to help Zopa grow.
<h3>Responsibilities:</h3>
<ul>
<li>Work with our Infosec team to triage and define security work coming into ZRE</li><li>Define remediation plans for security issues</li><li>Define our AWS Account security baseline, including management of common Security controls using Organisations</li><li>Contribute a security perspective to design discussions for new projects within ZRE, and the wider business</li><li>Automate to improve response to security issues and reduce toil</li><li>Use Threat Modelling to identify vulnerabilities and attack vectors across our infrastructure</li></ul>
<h3>About you:</h3>
<ul>
<li>In-depth knowledge of AWS (Organisations, IAM, VPC Networking, KMS, GuardDuty, CloudTrail, Config)</li><li>Experience using Infrastructure as Code (e.g., Terraform)</li><li>Strong knowledge of Containers and Orchestration (Kubernetes, Docker)</li><li>Experience with Linux administration, hardening and troubleshooting</li><li>Operational experience with HashiCorp Vault (ACL management, auth methods, secret engines)</li><li>A passion for Information Security, with experience applying this to Cloud Operations</li><li>A well-rounded understanding of foundational security concepts including best practices and how to apply them. Such as, Threat Modelling, OWASP Top 10 &amp; common vulnerabilities, PKI, TLS</li><li>Comfortable with scripting languages e.g. Bash, Python, PowerShell</li><li>Functional understanding of Networking &amp; common protocols</li></ul>
<h3>Nice to have:</h3>
<ul>
<li>Experience working in an FCA regulated organisation, ideally within the financial sector</li><li>Exposure to Active Directory</li><li>Hands-on experience with Networking e.g., CCNA or experience with physical networks</li></ul>#LI-MW1Flexible working? Yes please!Whether you want to come into our open-plan, riverside London Bridge office or work from the comfort of your own home (or both!), you’ll be able to decide on an approach with your manager, looking at what works best for you, your role and your team.Not only that – you'll also have the option of working from abroad for up to 90 days a year!* But no matter where you are, we’ll make sure you’ve got everything you need to thrive, both in your work and home life, from day one. *Subject to having the right to work in the country of choiceTo thrive here, you’ll need to: Champion our customers. Whatever your role, you’ll be close to our customers. We care passionately about doing the best for them.  Help us make fearless choices. Our environment is fast-paced, agile and open. You’ll solve interesting and challenging problems, and be trusted and empowered to bring your ideas to life. Walk the talk. Like us, you’ll be honest, stick to your promises and face the tough moments head-on. Win smarter. You’ll be always on the lookout for a better way of doing things, going beyond ‘good enough’ and welcoming different points of view. Be in it together. You’ll join an ambitious, diverse and all-round approachable team with a mix of ideas and talents who inspire each other to be better every day.  Zopa is proud to offer a workplace free from discrimination. Diversity of experience, perspectives, and backgrounds leads to great products and unique company culture. We simply can’t expect to empower our customers to better manage their money without challenging the current status quo. Creating the best place for money is no easy task, which is why we need talent from all walks of life.

London

Cloud Security Engineer

Wise

Wise is one the fastest growing companies in Europe and we’re on a mission: to make money without borders the new normal. We’ve got 13 million customers across the globe and we’re growing. Fast.
Current banking systems don't let us send, spend or receive money across borders easily. Or quickly. Or cheaply. 
So, we’re building a new one.
And, we’re looking for a Security Engineer with focus on SOC to join our Security Operations team in Tallinn, who is responsible for the global security features of the Wise products.  
For our customers, using Wise should feel as simple as sending a text message. Yet behind our app and website lies a complex, one-of-a-kind engine of currencies and routes that’s being designed, built and powered by our talented teams in cities around the world. With new capabilities being built every day, there’s still a lot to figure out, and we can’t do it alone. This role is a unique opportunity to have an impact on<a href="https://wise.jobs/what-we-do/" rel="noopener noreferrer nofollow ugc" target="_blank"> Wise’s mission</a>, grow as a product leader and help save millions more people money.  
The Security Operations Team is responsible for technical security concerns, security incident response lifecycle and AppSec across the company. We work together with product teams to minimise the amount of vulnerabilities introduced into Wise products. And we act as the first line of defence for attacks aimed against us internally or externally. 
Here’s how you’ll be contributing to the Engineering Team:
<ul>
<li>Help us detect, analyse and mitigate attacks or abuses across the company. You’ll be acting as a 2nd line Security Engineer in SOC.</li>
<li>You will be improving and developing Wise security monitoring solutions and helping relevant teams to solve problematic vectors. </li>
<li>Together with Engineering and Platform teams you will find new ways to keep our customers and Wise safe from malicious intent while staying invisible for good customers.</li>
</ul>
Is this you?
<ul>
<li>Are passionate about Cybersecurity and Incident Response</li>
<li>Have worked within a production environment and understand the importance of CI</li>
<li>You’re passionate about defending web attacks and abuse</li>
<li>You like to deal with complicated security incidents</li>
<li>Are passionate about working with data - extracting information from large sets of data and finding patterns or abnormal activity</li>
<li>Have automated your detections and mitigations in Python/Go/Java</li>
<li>You have worked with different SIEM-s and understand what happens under the hood</li>
<li>Know how to secure infrastructure in AWS and have done this before</li>
<li>A good understanding of Linux and understand how to secure it</li>
<li>You understand the value of WAF and how to maintain it</li>
<li>An understanding of what it takes to secure Docker and Kubernetes</li>
<li>Experience in securing networks or hardening OS</li>
<li>Previously working experience with vulnerability scanning solutions and understanding the difference</li>
<li>Knowledge of security standards (PCI DSS, ISO, SOC)</li>
<li>A good understanding of identity and access management and experience implementing least privilege with RBAC policies</li>
<li>On-call on a rotation basis isn't new to you and work at night if needed, but would prefer to automate the workflow</li>
</ul>
Some extra skills that would be great:
<ul>
<li>Infrastructure pentesting experience</li>
<li>Knowledge of apparmor, seccomp, eBPF</li>
<li>Experience working with IDS solutions</li>
<li>Have an understanding of the concept of microservice architectures</li>
<li>A  basic understanding of statistics and Machine Learning</li>
<li>You understand what a runbook is and can define it for simple IR purposes</li>
<li>A good understanding of Windows internals and can work with Powershell</li>
</ul>
Interested? Find out more:
<a href="https://wise.jobs/2019/12/05/how-we-work-a-practical-guide/" rel="noopener noreferrer nofollow ugc" target="_blank">How we work – a practical guide</a>
<a href="https://www.youtube.com/watch?v=mh74o4zp7n8" rel="noopener noreferrer nofollow ugc" target="_blank">Wise Vlogs: Omar, Engineering Lead</a>
<a href="https://medium.com/transferwise-engineering" rel="noopener noreferrer nofollow ugc" target="_blank">Engineering team blog</a>
<a href="https://medium.com/transferwise-engineering/scaling-our-infrastructure-at-transferwise-how-we-make-it-work-a4c7a1bd5b8e" rel="noopener noreferrer nofollow ugc" target="_blank">Scaling our Infrastructure; how we make it work</a>





What you get back:
<ul>
<li> RSU's in a growing company</li>
<li> An annual self-development budget</li>
<li> Pet friendly offices</li>
<li> Lots of fun group activities like yoga, running and boardgame nights</li>
<li> Relocation and visa expenses covered</li>
<li> A paid 6-week sabbatical leave after four years</li>
</ul>
Find out more about our benefits in our <a href="https://www.wise.jobs/2020/07/02/benefits-in-our-tallinn-office/" rel="noopener noreferrer nofollow ugc" target="_blank">Tallinn</a> office.
 
We’re people without borders — without judgement or prejudice, too. We want to work with the best people, no matter their background. So if you’re passionate about learning new things and keen to join our mission, you’ll fit right in.
 
Also, where and what you studied isn't important to us. If you’ve got great experience, the right skills for the role and you’re great at articulating your thinking, we’d like to hear from you.
 
#LI-GC1

Tallinn

Security Engineer - SOC

Starling Bank

Everyone at Starling gets the chance to own interesting things from day one, and we’re told one of the best things about working here is the ability to achieve a lot in a short space of time.To support our growth, we are looking for SOC Analysts to join our growing cyber security function. This role will be supporting our 24/7 operational capabilities.As a member of the Starling SOC team, you will be working with the industries brightest SecOps professionals to protect Starling customers, assets, and systems using the latest technologies.Role Overview:<ul> <li>Incident Triage, Response, and Investigations based on Alerts received from multiple sources which include:<ul> <li>Cloud Infrastructure/Security.</li> <li>Endpoint Detection and Response.</li> <li>Perimeter detection tooling.</li> </ul> </li> <li>Investigating and responding to security alerts raised by Users.</li> <li>Enhancing and creating analytic triggers to enhance alert efficacy.</li> <li>Continuous development of incident handling and readiness processes.</li> <li>Proactive threat hunting based on threat intelligence.</li> <li>Documentation of incidents and investigations.</li> </ul>RequirementsWe’re open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. Below is an overview of the skills that will be used:<ul> <li>Understanding of AWS Security Solutions.</li> <li>Experience working and supporting analytics/SIEM platforms.</li> <li>Experience working in CSIRT/SOC functions.</li> <li>Experience supporting Incident Response engagements.</li> <li>Experience in endpoint based investigations.</li> </ul> <ul> <li>Interest in Automation.</li> <li>Interest in Threat Intelligence and Analytic Tuning.</li> <li>A high level understanding of mobile, network and operating system security controls.</li> </ul><ul> <li>Any experience of programming in Python, Go and/or Java.</li> <li>A Cyber/Information Security related degree and/or relevant cyber security qualification(s).</li> </ul>BenefitsWe are a leading digital bank on a mission to disrupt the banking industry. We’ve built an app with smart money management tools to help our customers live a healthier financial life. We also offer groundbreaking B2B banking and payments services.Since our launch in 2014, we’ve opened almost three million accounts including 480,000 business accounts for small and medium-sized enterprises (SMEs).We’re a fully licensed UK bank and we have the culture and spirit of a fast-moving, disruptive technology company. We’ve been voted Best Current Account for the last five years running, named Which? Banking Provider of the Year for the last two and we were the most switched to bank in 2021. We employ more than 1,800 people across our London, Southampton and Cardiff offices.Starling technology works in a hybrid pattern both from home and one of our three offices. We’re open to applications from across the UK including fully remote, if you’re hybrid our preference is that you’re located within a commutable distance to either our London, Southampton or Cardiff office, so that we’re able to see each other and collaborate in person too.Benefits:<ul> <li>25 days holiday (plus public holidays)</li> <li>An extra day’s holiday for your birthday, taken a week on either side of the day</li> <li>16 hours paid volunteering time a year</li> <li>Part-time and/or flexible hours available for most roles</li> <li>Hybrid/remote working</li> <li>Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner benefits include discounts with Waitrose, Mr&amp;Mrs Smith and Peloton</li> <li>Generous family-friendly policies</li> <li>Enhanced sick pay</li> <li>Contributory pension scheme</li> <li>Varied social groups set up and run by our employees</li> <li>Perkbox membership giving access to retail discounts, a cashback scheme, a wellness platform for physical and mental health, a birthday box and weekly free coffee</li> <li>Access to ‘salary sacrifice’ benefits such as Cycle to Work scheme</li> </ul>Full details are available on our <a href="https://www.starlingbank.com/careers/engineering/" rel="noopener noreferrer nofollow ugc" target="_blank">careers</a> siteAbout Us:We are a leading digital bank on a mission to disrupt the banking industry. We’ve built an app with smart money management tools to help our customers live a healthier financial life. We also offer groundbreaking B2B banking and payments services.Since our launch in 2014, we’ve opened almost three million accounts including 480,000 business accounts for small and medium-sized enterprises (SMEs).We’re a fully licensed UK bank and we have the culture and spirit of a fast-moving, disruptive technology company. We’ve been voted Best Current Account for the last five years running, named Which? Banking Provider of the Year for the last two and we were the most switched to bank in 2021. We employ more than 1,800 people across our London, Southampton and Cardiff offices.Starling Bank is an equal opportunity employer, and we’re proud of our ongoing efforts to foster diversity &amp; inclusion in the workplace. Individuals seeking employment at Starling Bank are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law.By submitting your application, you agree that Starling Bank may collect your personal data for recruiting and related purposes. Our <a href="https://www.starlingbank.com/legal/privacy-notice/" rel="noopener noreferrer nofollow ugc" target="_blank">Privacy Notice</a> explains what personal information we may process, where we may process your personal information, its purposes for processing your personal information, and the rights you can exercise over our use of your personal information.

Southampton

SOC Analyst

Core10

100% RemoteCore10 is in search of a Network Security Engineer to join our mission-critical team. This position will involve implementing firewall changes and troubleshooting firewall issues for the various business units within our enterprise environment and for our customers. The majority of the daily work will involve working tickets out of the two main help desk ticket systems as well as installation, upgrades, and decommissioning of firewall equipment. Core10 is a rapidly growing, full-service tech company headquartered in Nashville, TN. We specialize in software development, API integration and SaaS implementation and customer success services to the best financial services and Fintech organizations in the United States. We are also an industry leader with our banking platform, Accrue: a digital lending and account opening platform for community banks, credit unions, Fintechs, and consumers. What You'll Do:<ul> <li>Researches, recommends and implements changes to enhance systems security.</li> <li>Designs and builds various network monitoring systems and tools.</li> <li>Provides assistance to less experienced team members.</li> <li>Responds to alerts and security related issues. </li> <li>Performs incident response and handles escalated cases; identifies unauthorized access to systems; may inventory computers for unauthorized programs and policy violations.</li> <li>Provides moderately complex troubleshooting and customer support regarding security related issues. </li> <li>Configures firewall rules for both internal and external customers</li> <li>Conducts life-cycle management of firewalls within the environment</li> <li>Ensures documentation for all firewall rules are completed in accordance to internal policies and other industry regulations.</li> </ul>RequirementsQualifications &amp; Experience:<ul> <li>Must have 4 years of experience in network technology, firewall, and/or information security in a large enterprise environment.</li> <li>Networking and/or security industry-standard certifications.<ul> <li>Extensive Cisco NGFW (Next-Gen Firewall) experience</li> <li>Cisco CDO (Cisco Defense Orchestrator) experience</li> <li>Extensive Cisco IPS Firepower experience</li> <li>Moderate level of understanding on networking including routers</li> </ul> Bonus Points: <ul> <ul><li>Banking or Fintech experience</li></ul> <ul><li>Cloud Firewall (GCP, Azure, AWS) experience </li></ul> </ul> </li> </ul>Benefits<ul> <li>Work From Home (100% remote!)</li> <li>Health Care Plan (Medical, Dental &amp; Vision) for employee (a significant portion of employee only paid) and family (paid in part)</li> <li>Collaborative culture: virtual &amp; optional in-person events, retreats &amp; swag </li> <li>Training &amp; Development<ul> <li>Individual Training Budget</li> <li>Technical Book Club &amp; other study groups</li> <li>Certifications are encouraged with bonuses</li> <li>Mentoring Program with bi-weekly 1:1s</li> <li>Up-to-date technologies, tools and methodologies</li> </ul> </li> <li>Parental Leave (Maternity &amp; Paternity)</li> <li>Flexible PTO plan</li> <li>Retirement Plan (401k)</li> </ul>Core 10, Inc. does not discriminate in employment matters on the basis of race, color, religion, gender, national origin, age, military service eligibility, veteran status, sexual orientation, marital status, disability, or any other protected class. We support workplace diversity.

United States

Network Security Engineer

Circle

Circle is a global financial technology firm that enables businesses of all sizes to harness the power of digital currency and public blockchains for payments, commerce and financial applications worldwide. Circle platforms and products provide a suite of internet-native financial services for payments, treasury infrastructure and capital formation. Circle is also a principal developer of USD Coin (USDC), which has become the fastest growing dollar digital currency in the world. USDC has grown to over 53+ billion in circulation and supported over $1.9+ trillion in transactions in the past year. Circle’s payments and treasury infrastructure services available through the Circle Account and APIs helps bridge the legacy financial system and digital currency and blockchain based finance.  Circle’s SeedInvest service brings internet-native fundraising and capital formation to startups and growth companies.  Combined, Circle’s suite of services helps companies to participate in a more open, global and inclusive financial system.
What you’ll be part of:
With the mission “To raise global economic prosperity through the frictionless exchange of financial value,” Circle was founded on the belief that the internet, blockchains and digital currency will rewire the global economic system, creating a fundamentally more open, inclusive, efficient and integrated world economy.  We envision a global economy where people and businesses everywhere can more freely connect and transact with each other with new technologies for digital money and internet-native finance. We believe such a system can raise prosperity for people and companies everywhere. Our mission is powered by the values we espouse and which we expect all Circlers to respect. We are Multistakeholder, serving the needs of our customers, our shareholders, our employees and families, our local communities and our world. Furthermore, we are also Mindful, Driven by Excellence, and High Integrity.What you’ll be responsible for:
In 2020, Circle unveiled Circle APIs: a set of solutions and smarter technology to help businesses accept payments in a more global, scalable and efficient alternative to traditional banking rails (spoiler: we’re using USD Coin under the hood).
Over the next 12 months, we’re going to rapidly grow our API customer base and enable even more businesses to easily integrate and benefit from the breakthrough of programmable money on the internet. 
The Circle Security Team works to protect Circle; our customers, clients, and partners; and the financial markets upon which we rely.  The security team leads the company’s programs for information security and cybersecurity, business continuity, and vendor risk management.
As a member of this team, you’ll lead projects and be responsible for key deliverables of the security program while collaborating across Circle teams.  You will continue to learn and stay current in a fun and rapidly changing environment.
What you'll work on:
<ul>
<li>Work with the product management and software engineering teams during all phases of the SDLC to ensure that applications are designed and implemented securely.</li>
<li>Test web applications and underlying systems for vulnerabilities using both tools and manual techniques; manage the remediation of findings through resolution.</li>
<li>Recommend code changes to eliminate vulnerabilities.</li>
<li>Automate security tests within the CI/CD pipeline.</li>
<li>Help develop secure coding standards and training materials based on findings seen in Circle’s environment to empower engineers to write more secure code.</li>
<li>Research vulnerabilities specific to blockchain technologies and incorporate this knowledge in Circle’s security practices.</li>
<li>Serve as an escalation point to investigate security alerts and identify incidents.</li>
<li>Investigate vulnerability reports related to Circle products and systems.</li>
<li>Manage vendors to conduct penetration tests and other security-related projects.</li>
<li>Influence the continuous improvement of the application security program.</li>
<li>Support other security team projects such as threat modeling, vulnerability scanning, and audits.</li>
</ul>
You will aspire to our four core values:
<ul>
<li>Multistakeholder - you have dedication and commitment to our customers, shareholders, employees and families and local communities.</li>
<li>Mindful - you seek to be respectful, an active listener and to pay attention to detail.  </li>
<li>Driven by Excellence - you are driven by our mission and our passion for customer success which means you relentlessly pursue excellence, that you do not tolerate mediocrity and you work intensely to achieve your goals. </li>
<li>High Integrity - you seek open and honest communication, and you hold yourself to very high moral and ethical standards. You reject manipulation, dishonesty and intolerance.</li>
</ul>
What you’ll bring to Circle:
<ul>
<li>7+ years of total experience.</li>
<li>3+ years of experience as a security engineer that has been leading projects and developing resolutions in cybersecurity.</li>
<li>Enthusiasm for securing and breaking software. </li>
<li>Experience with common attack techniques and conducting penetration tests.</li>
<li>Experience designing software security features including, but not limited to, access control features, logging and monitoring features, input validation and session management.</li>
<li>Experience automating security tests in CI/CD pipelines.</li>
<li>Experience working with SAST and DAST testing processes and tools.</li>
<li>Working knowledge of public and private key cryptography.</li>
<li>Familiarity with techniques for making software robust against common attacks.</li>
<li>Self-motivated and creative problem-solver able to work independently with minimal guidance.</li>
<li>Strong ability to work collaboratively across teams.</li>
<li>Ability to manage multiple competing priorities and use good judgment to establish order of priorities on the fly.</li>
<li>Experience working in financial services or financial technology desired.</li>
<li>Bachelor's degree in computer science, computer engineering, cybersecurity or related field  Equivalent experience also accepted.</li>
<li>Certifications such as CISSP, CEH, or similar will receive favorable consideration but are not required.</li>
<li>Experience working on applications deployed within AWS highly desirable.</li>
<li>Experience with at least several of the following is highly desirable:  Java, Angular JS, REST APIs, JSON, and Python.</li>
<li>Fluency in Mandarin is preferred.</li>
</ul>We are an equal opportunity employer and value diversity at Circle. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
#LI-Remote

Singapore

Lead Security Engineer, APAC

Apply to Banking Cyber Security Jobs in companies remotely and near you. New Banking Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Cloud Security Engineer at Zopa	Full Time Manager Active Directory Agile AWS
Security Engineer - SOC at Wise	Full Time Incident Response Windows AWS Banking
SOC Analyst at Starling Bank	Remote Full Time Soc Analyst Analyst Incident Response
Network Security Engineer at Core10	Remote Full Time Incident Response AWS Azure
Lead Security Engineer, APAC at Circle	Remote Full Time Application Security Audits AWS

Banking Cyber Security Jobs

0 Banking Cyber Security Jobs. Page 1 of 1

5 closed banking cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Banking Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Banking Cyber Security Jobs

0 Banking Cyber Security Jobs. Page 1 of 1

5 closed banking cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Banking Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter