Soc analyst jobs in Union City, New JerseyCreate job alerts

Job Description Senior IT Security Compliance Analyst At Five Rivers IT, we build and service reliable IT infrastructures for midsized businesses. Five Rivers IT has been growing at a consistent rate of 30% a year for the last 3 years. We are in search of a Senior IT Security Compliance Analyst to join the dynamic team of professionals providing world-class IT services to its clients in the NYC metro area. This is a great opportunity for a self-starter with a proven track record to develop, implement, and support various initiatives in the area of governance, risk and compliance. Responsibilities: • Lead the planning, scoping, execution and documentation of audits primarily in areas associated with technology and technology-related risks., • Act as a liaison between Auditors and Engineering/IT by coordinating requests for information and coordinating responses to any observations., • Maintain proactive ongoing compliance by utilizing compliance tool to perform periodic security tasks and checks., • Research new security compliance requirements and assist in evaluating compliance control requirements., • Support and monitor remediation efforts of audit findings and validate the closure by reviewing relevant evidence., • Write detailed findings, remediation plans, and other supporting documentation, • Provide actionable, technical advice to engineers to enhance security control design & effectiveness (including for cloud environments), • Develop a close partnership with engineering control owners to educate them on compliance requirements and develop risk-appropriate control implementation solutions., • Responsible for Incident Management, be readily available for: Incident documentation, ensure risk analysis and severity, manage containment, lead investigation, ensure proper notification protocol, conduct & document lessons learnt, Report on findings to then communicate them to the client. Required Qualifications:, • Bachelor's in Computer Science, Computer Engineering, Information Systems or related field or equivalent work experience, • 10+ years of experience managing Information Security audits (e.g., SOC 2, ISO 27001, PCI DSS, HIPAA), • Experience implementing security techniques, practices, and controls that can be applied to address risks, • Experience operating as part of an Information security program in alignment with common information technology management frameworks such as ISO 27001, NIST, CIS, ITIL, COBIT, etc., • Strong written and verbal communication skills, • Strong program management skills, • Experience working closely with auditors and/or external regulators, • Experience managing security toolsPreferred Qualifications: Experience with Audit Management tools Security certification Prior experience leading or managing security audits at a SaaS/Cloud company or as a Security Auditor at an audit firm Systems Admin or Network Admin experience implementing security controls Other Details about the Job • This job requires working for multiple clients across multiple environments in a managed services setting., • This is a Full-Time position., • Compensation for IT Security Compliance Analyst will range from $125,000 to $175,000 based on experience, if your experience falls outside required ranges compensation may be based on other open roles., • All standard benefits are included such as medical/dental/vision insurance and vacation time., • We encourage and reward professional certifications. Please send your resume with the expected salary. Applications lacking expected salary will not be considered. Powered by JazzHR rAuYtaW1iE

Job Description MetTel is a global communications solutions provider with the most complete suite of fully managed services that focus on secure connectivity, and network and mobility services. We simplify communications and networking for business and government agencies. Our customers include many of the Fortune 500, and Gartner recognizes us as an industry leader. We have the broadest portfolio of technology and integrated partnerships, as well as our private network, which we use to create tailored solutions design, deployment, and ongoing management, driving cost savings, efficiency, innovation, and the ability to focus on core objectives. We believe that each team member is a key to the success and sustainability of the group. In order to achieve this, we offer an environment where all professionals can grow and develop their skills and competencies, collaborate with diverse professionals, share knowledge and enjoy a rewarding career. We are looking for a Cybersecurity Engineer to join our Corporate IT Team in NYC / NJ! ROLE AND RESPONSIBILITIES: We're looking for a Cybersecurity Engineer (not an Analyst) who can both build our security infrastructure and operate it day-to-day. This isn't a pure admin role or a pure analyst role — it's both. You'll architect and install enterprise-grade, on-prem security platforms for dual-datacenter active/active deployments. You'll then turn around and use those same tools operationally — writing detection logic, creating dashboards, building SOAR playbooks, and triaging what you built. RESPONSIBILITIES: You'll be primarily blue team — defending, detecting, and running the platforms you build. But if you have offensive security chops, this is a chance to participate and help us with red team functions as well. • Architect and implement enterprise security platforms on-prem and in the cloud: CyberArk PAS (Vault, CPM, PSM, PVWA), Splunk Enterprise/ES (indexers, search heads, clustering, HA/DR), Tenable, SOAR, OKTA/SAML, • Design for scale: capacity planning, redundancy, role-based access control, and integration with AD, applications, and infrastructure, • Then operate what you build: custom dashboards, correlation rules, detection tuning, automated playbooks, • Own incident response and threat hunting using your own tooling — you're the analyst, not just the platform owner, • Support compliance (SOC 2, PCI DSS, NIST 800-53) with the audit trails and reporting your architecture produces DESIRED QUALIFICATIONS: • 4+ years securing enterprise environments, with real hands-on time both building (installs, architecture, HA/DR design) and using (detection, dashboards, response) security platforms — not just one or the other, • Deep proficiency in at least two of: CyberArk, Splunk Enterprise/ES, Tenable, SOAR (Phantom/Demisto/Resilient), • Strong Linux and Windows administration; scripting in Python/Bash/PowerShell for automation and integrations, • Working knowledge of cloud security platforms (AWS Security Hub, Azure Security Center), • Comfortable owning something end-to-end: design it, deploy it, defend with it, • Bonus: offensive security background (Nmap, Burp, Metasploit, pentest/ethical hacking experience) — not required, but a strong plus given the red team opportunity above ADDITIONAL SKILLS - NICE TO HAVE: • CISSP, • GCIH, • CEH,, • CySA+, or vendor certs (CyberArk Defender/Sentry, Splunk Certified Admin/Architect) *The salary reflected is a good faith estimate of base pay for the primary location of the position. Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay for this position is up to $155,000 annually. Pay will vary by work location and may also depend on job -related knowledge, skills, experience and abilities of the successful candidate. Your recruiter can share more about the specific salary range for the job location during the hiring process. Keywords: #NYC #NewYorkCity #Manhatten, #Cybersecurity, Cybersecurity, CISSP, #CISSP, SecurityTools ,#SecurityTools, SIEM, #SIEM, #InfrastructureEnvirnonments, #CyberArk, CyberArk, #Splunk, Splunk, OKTA, #OKTA, Tenable, #Tenable, #SOAR, SOAR, #SOARPlatforms, SOARPlatforms, #Telecom, Telecom, #Troubleshoot, #Engineering MetTel is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. To learn more about our company visit us at www.mettel.net

Job Description Please note: This position description is for RFQ response. There is no active vacancy at this time.About FedSync:Since our inception, FedSync has stood for Accountability, Integrity, Teaming, Value, Innovation, and Quality-the core values that define who we are. Our vision is to collaborate with innovative, forward-thinking leaders to deliver solutions that look beyond today. Our mission is to provide the federal government with proven, innovative solutions that transform organizations by equipping them with the right tools and people to meet tomorrow's challenges. At FedSync, our people matter-both our employees and our clients.Position OverviewThe Cybersecurity Analyst proactively monitors, detects, and responds to security threats across networks, systems, and cloud environments to ensure the protection of sensitive DOE data and maintain enterprise resilience. This role drives risk reduction by analyzing incidents, implementing controls, and collaborating with cross-functional teams to strengthen the organization's security posture. Five (5) Cybersecurity Analysts are required for this engagement. Work will be a hybrid schedule withe 3 days in the office and 2 days of telework.Key ResponsibilitiesPerform threat triage, incident investigation, and risk analysis to protect the confidentiality, integrity, and availability of DOE systems, applications, and data assets.Analyze security alerts and events to identify indicators of compromise (IOCs), attack patterns, and emerging threats across on-premises, cloud, and hybrid environments.Correlate security data from disparate sources to develop a unified view of organizational cyber risk, enabling informed decision-making and prioritization.Identify vulnerabilities, misconfigurations, and protection gaps across infrastructure, cloud platforms, and data-centric environments; validate findings and assess potential business impact.Monitor, analyze, and detect cybersecurity threats across multiple security domains including Security Operations (SOC), Cloud Security, Infrastructure Security, Information Protection, and Data Protection.Monitor security alerts through the SIEM platform and execute immediate triage and incident response protocols.Conduct proactive threat hunting to identify hidden threats and adversary behavior.Implement, tune, and manage DLP controls across endpoints, email, and cloud collaboration platforms.Ensure alignment with federal and regulatory security standards (NIST, FISMA) and internal cybersecurity policies.Contribute to continuous improvement of security operations by documenting findings, trends, and lessons learned from incidents and risk assessments.Minimum Qualifications5+ years of experience in cybersecurity analysis, security operations, or a related field.Demonstrated experience performing threat triage, incident response, and risk analysis.Proficiency with SIEM platforms, vulnerability scanners, and cloud security tools.Working knowledge of NIST and FISMA compliance frameworks.Experience supporting security in large enterprise or public-sector environments preferred.Required Certifications (one or more)CISSP, CompTIA Security+, CompTIA CySA+CEH (Certified Ethical Hacker)GCIA, GCIH, CISA, or CCSPTechnologies & ToolsSIEM: Devo / SplunkVulnerability Scanners: Rapid7 / ArmisCloud Platforms: AWS / AzureWireshark, SQL, Python, MS Power BI, Microsoft Office Suite Acceptable background check including criminal history background check and credit Check.

Job Description This role is located in New York City and will require a hybrid work schedule of at least 2 days in office per week. This role is for Officer level candidates. About the Bank Sumitomo Mitsui Trust Bank, Limited was established through the merger of The Sumitomo Trust and Banking Co., Ltd with Chuo Mitsui Trust and Banking, Ltd. on April 1, 2012. We are one of the largest asset managers in Asia and number one among Japanese financial institutions by AUM, with approximately $850 Billion USD in AUM. The Bank provides an assortment of financial solutions and manages a broad spectrum of financial products across its global branches. Department Overview: The Americas Division (“AD”) was established in the Sumitomo Mitsui Trust Bank, Limited, New York Branch) (“SMTBNY”) to perform corporate functions and supervise U.S. entities. Established under the AD are the “Global Banking Unit (“GBU”), Americas Division” and “Global Markets Unit (“GMU”), Americas Division” which performs business functions. Information Risk Governance (“IRG”) provides oversight to information and cyber security risk by maintaining and improving branch wide framework that is in-line with the Head Office and regulatory requirements and addresses Confidentiality, Integrity, and Availability for information assets. IRG establishes appropriate policies, procedures, measurement, and monitoring processes to proactively assess and evaluate and cyber security and information security risks inherent in the Branch Operations. IRG is directly involved in all information and cyber security related projects, matters and issues. Your Role Overview: The Security Operations Center (SOC) Analyst is responsible for monitoring, detecting, investigating, and responding to cybersecurity events and alerts across the organization’s technology environment. This role serves as a frontline defender within the Information Risk Governance Department, identifying potential threats, investigating suspicious activities, and supporting incident response efforts in order to protect the confidentiality, integrity, and availability of organizational assets. Your Duties and Responsibilities: • Monitor and analyze security events and alerts generated by security systems such as the Security Information and Event Management (SIEM) system, Endpoint Detection & Response (EDR) system, Firewalls, Network Access Control (NAC), Network Detection & Response (NDR) system, and Intrusion Detection and Prevention (IDS/IPS) systems., • Triage and analyze security alerts to determine severity, scope, and potential impact and business risk., • Investigate suspicious system, network, and user activity, escalating potential security incidents to the Incident Response Team and Management as appropriate., • Maintain awareness of the evolving cybersecurity landscape including emerging threats, attack techniques, vulnerabilities, and indicators of compromise (IoC), • Conduct proactive threat-hunting activities to identify, investigate, and mitigate emerging threats, anomalous behavior, and potential indicators of compromise that may evade existing security controls., • Participate as a member of the Incident Response Team during cybersecurity incidents and investigations. Tasks include documenting incident findings, actions taken, and to collect system log evidence and forensic artifacts., • Maintain, administer, and tune SIEM and NDR Security tools including ongoing optimization of detection rules, use cases, dashboards, reports, and alert configurations., • Liaise and coordinates with vendors, service providers, and contracts to support security operations and incident response activities., • Assists with internal and external audits, regulatory examinations, and information security assessments., • Assists with the evaluation, testing, and comparative analysis of security monitoring and SOC-related technologies., • Serves as the subject matter expert (SME) for assigned security monitoring and detection platforms., • Maintains procedures, playbooks, and documentation related to security monitoring and incident response processes., • Performs other duties and responsibilities as assigned by management. Your Qualifications: • Bachelor’s degree or equivalent in Information Technology, Cybersecurity/Information Security, or a related field with 3+ years of experience., • Minimum of three (3) years of experience in cybersecurity, security operations, or a related technical field., • Strong understanding of security principles, frameworks, and best practices., • Experience with security monitoring, event analysis, and threat detection technologies., • Experience with incident investigation and response, • Excellent communication and problem solving skills, • Knowledge of threat intelligence concepts, frameworks, and operational use cases., • Understanding of Cloud Security principles and controls., • Strong knowledge of Microsoft Windows Server 2019/2022/2025 and Active Directory environments., • Strong knowledge of networking protocols, architecture, and security concepts, • Strong understanding of firewall technologies and security controls, • Strong understanding and correlation skills of security logs, including Windows Event logs, Active Directory, DNS, proxy, firewall, EDR, and Cloud platform logs., • Strong knowledge and prior experience with SIEM platforms and security event correlation tools., • Strong knowledge and prior experience with User and Entity Behavioral Analytics (UEBA) and behavioral analysis tools., • Working knowledge of Amazon Web Services (AWS) architecture, services, and operations., • Working knowledge of Linux systems would be a plus, • Excellent analytical, organization, and multi-tasking skills with strong attention to detail and accuracy., • Prior experience in the Financial institution or banking industry would be preferred. Why you should join SuMi Trust:SuMi Trust embraces flexible ways of working when the business and role permits. We provide employees with a hybrid working model, allowing for in-office work and work from home. Our diverse and inclusive environment along with our global presence enables us to collaborate and communicate to meet our business needs. We believe that efficient teams need truth, loyalty, and a strong sense of purpose to balance risk and their targets. We make sustainable business decisions to improve our society and the world. We believe that each person brings a unique value that drives the business though their creativity and passion. • The Employee Benefits package includes: Paid Time Off, medical, HSA, vision, dental, FSA, 401(k), profit sharing, legal plan, cancer indemnity plan, disability insurance, life insurance, employee assistance program, commuter benefits, business travel accident, paid volunteer day, paid memberships, paid seminars, and tuition assistance., • We offer many socialization opportunities for wellness, financial wellbeing, runs/walks, team building, happy hours, and activities to support the Sustainable Developmental Goals. Check out our LinkedIn for our employee experience: https://www.linkedin.com/company/smtbny We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law. SuMi Trust provides reasonable accommodations for employees and applicants with disabilities consistent with applicable law. If you need a reasonable accommodation during the application

Job Description Established in 2022, Guardz rapidly emerged as a noteworthy player in the cybersecurity sphere, securing $85M in funding and rallying a dedicated team of 120 industry professionals. Our vision is to foster a safer digital landscape for small and medium businesses across the globe. To this end, we introduced our comprehensive all-in-one platform, and continue to grow and expand our team, our partnerships and our revenue. We are looking for an experienced MDR Manager to lead our Security Operations team. The ideal candidate combines strong technical expertise with operational leadership and enjoys developing analysts, improving processes, and managing complex security incidents across multi-tenant MSP environments. As a hands-on leader, you will oversee day-to-day MDR operations, including coverage, SLAs, quality, escalation tiers, and analyst development. You will also serve as the final escalation point for Tier 3 threats and lead the team through the most complex investigations. Responsibilities: • Own 24/7 shift coverage, tiering, and escalation paths so every alert reaches the right analyst and there are no gaps in monitoring or escalation. Participate in an on-call rotation with the team., • Own response SLAs (time-to-triage, time-to-notify, MTTR) and report SOC KPIs (MTTD, MTTR, detection efficacy, false-positive rate, case aging, customer satisfaction) to leadership., • Run QA on closed alerts and incidents, drive down false positives, and maintain the teams runbooks, playbooks, and SOC standards., • Lead, coach, and mentor MDR Analysts: regular 1:1s, performance feedback, onboarding, and the T1-to-T3 training path. Run tabletop exercises and post-incident reviews., • Act as technical lead and final escalation point for T3 incidents (advanced malware, identity threats like MFA fatigue and token theft, active breaches), leading the full lifecycle with defensible documentation., • Correlate alerts across EDR (SentinelOne, Defender for Endpoint), ITDR (M365, Google Workspace), and email security, and run proactive threat hunts aligned to MITRE ATTCK., • Use Guardz AI agents, Google BigQuery, and query languages such as SQL and KQL to triage, hunt across high-volume logs, and confirm incident scope at machine speed., • Partner with MSPs on major incidents and posture reviews, and feed findings back into detection with product, threat research, and engineering. Requirements: • 5+ years in SOC, MDR, or Incident Response handling complex attacks, including 2+ years as a Team Lead, Shift Lead, or senior., • Hands-on expertise with EDR (SentinelOne, CrowdStrike, Defender for Endpoint) and ITDR (identity threat management across M365 and Google Workspace)., • Hands-on experience with Google BigQuery, Snowflake, Splunk, Elastic, or equivalent, and fluency in a query language such as SQL, KQL, or SPL., • Experience with MITRE ATTCK-aligned detection, proactive threat hunting, and AI-driven triage engines, automated playbooks, or agentic SecOps platforms., • Excellent communication skills, able to make high-risk technical findings clear to both technical and non-technical audiences., • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent hands-on experience., • Preferred: CompTIA Security+, CompTIA CySA+, Microsoft SC-200, GIAC GCIH / GCIA / GCFA, or CISSP (or equivalent DoD 8570 / 8140 IAT Level II).

Job Description This role is located in New York City and will require a hybrid work schedule of at least 2 days in office per week. This role is for Officer level candidates. About the Bank Sumitomo Mitsui Trust Bank, Limited was established through the merger of The Sumitomo Trust and Banking Co., Ltd with Chuo Mitsui Trust and Banking, Ltd. on April 1, 2012. We are one of the largest asset managers in Asia and number one among Japanese financial institutions by AUM, with approximately $850 Billion USD in AUM. The Bank provides an assortment of financial solutions and manages a broad spectrum of financial products across its global branches. Department Overview: The Americas Division (“AD”) was established in the Sumitomo Mitsui Trust Bank, Limited, New York Branch) (“SMTBNY”) to perform corporate functions and supervise U.S. entities. Established under the AD are the “Global Banking Unit (“GBU”), Americas Division” and “Global Markets Unit (“GMU”), Americas Division” which performs business functions. Information Risk Governance (“IRG”) provides oversight to information and cyber security risk by maintaining and improving branch wide framework that is in-line with the Head Office and regulatory requirements and addresses Confidentiality, Integrity, and Availability for information assets. IRG establishes appropriate policies, procedures, measurement, and monitoring processes to proactively assess and evaluate and cyber security and information security risks inherent in the Branch Operations. IRG is directly involved in all information and cyber security related projects, matters and issues. Your Role Overview: The Third Party Information Security Analyst supports the Bank’s Third Party Risk Management function by focusing on assessing and monitoring information security risks associated with 3rd, 4th, Nth parties. This role assists with vendor due diligence, security reviews, information security risk assessments, and ongoing monitoring activities to ensure these third party relationships align with the organization’s security requirements. Your Duties and Responsibilities: • Conduct initial and continuous information security risk assessments of third (Nth) parties., • Review third party provided security documentation including SOC reports, ISO 27001 certifications, security questionnaires, and Business Continuity and Disaster Recovery documentation., • Document assessment findings and risk ratings in the Bank’s TPRM platform and maintain an up-to-date tracking sheet that provides management with clear visibility into the status, due date, and completion of each assessment and related follow-up actions., • For vendor due-diligence, with a focus on information security risks, coordinate with relevant Teams (Administration, Legal, etc.) for vendor onboarding and offboarding activities, • Perform on-going monitoring of information security-related incidents involving third-parties and coordinate with relevant stakeholders to facilitate requests for necessary information from the relevant third-parties and support the assessment of potential impact to the Bank., • Participate in internal audits and external examinations related to the information security risk domains of third party risk management, • Assist in maintaining information security-related TPRM policies and procedures., • Performs other duties and responsibilities as assigned by management. Your Qualifications: • 3+ Years of experience with risk assessment methodologies and techniques as well as Third Party Risk Management Lifecycle., • Prior experience with financial industry structure and concepts a plus., • Prior experience working on a Third Party Risk Management (TPRM) platform, such as Prevalent., • Prior experience working with and assessing information security-related documentation such as SOC 2 reports, ISO 27001 certification, etc., • Strong knowledge of information security and risk management frameworks, including NIST Cybersecurity Framework, ISO/IEC 27001, and the Cyber Risk Institute Profile., • Strong Microsoft Office skills, • Strong verbal and written communication skills., • Strong analytical skills, • Self-motivated with good time management skills. Why you should join SuMi Trust:SuMi Trust embraces flexible ways of working when the business and role permits. We provide employees with a hybrid working model, allowing for in-office work and work from home. Our diverse and inclusive environment along with our global presence enables us to collaborate and communicate to meet our business needs. We believe that efficient teams need truth, loyalty, and a strong sense of purpose to balance risk and their targets. We make sustainable business decisions to improve our society and the world. We believe that each person brings a unique value that drives the business though their creativity and passion. • The Employee Benefits package includes: Paid Time Off, medical, HSA, vision, dental, FSA, 401(k), profit sharing, legal plan, cancer indemnity plan, disability insurance, life insurance, employee assistance program, commuter benefits, business travel accident, paid volunteer day, paid memberships, paid seminars, and tuition assistance., • We offer many socialization opportunities for wellness, financial wellbeing, runs/walks, team building, happy hours, and activities to support the Sustainable Developmental Goals. Check out our LinkedIn for our employee experience: https://www.linkedin.com/company/smtbny We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law. SuMi Trust provides reasonable accommodations for employees and applicants with disabilities consistent with applicable law. If you need a reasonable accommodation during the application

Mercor is hiring SOC Investigation Specialist** on behalf of high-growth technology and enterprise partners building next-generation SOC automation and AI-driven investigation systems. Requirements - 3+ years of hands-on experience as a SOC analyst in a production SOC environment (Tier 2 or above st

Circle (NYSE: CRCL) is one of the world’s leading internet financial platform companies, building the foundation of a more open, global economy through digital assets, payment applications, and programmable blockchain infrastructure. Circle’s platform includes the world’s largest regulated stablecoin network anchored by USDC, Circle Payments Network for global money movement, and Arc, an enterprise-grade blockchain designed to become the Economic OS for the internet. Enterprises, financial institutions, and developers use Circle to power trusted, internet-scale financial innovation. Learn more at circle.com.What you’ll be part of:Circle is committed to visibility and stability in everything we do. As we grow as an organization, we're expanding into some of the world's strongest jurisdictions. Speed and efficiency are motivators for our success and our employees live by our company values: High Integrity, Future Forward, Multistakeholder, Mindful, and Driven by Excellence. We have built a flexible work environment where new ideas are encouraged and everyone is a stakeholder.What you'll be responsible for:The Circle Security Team works to protect Circle; our customers, clients, and partners; and the financial markets upon which we rely.As a member of this team, you'll lead projects and be responsible for key deliverables of the security program while collaborating across Circle teams. You will continue to learn and stay current in a fun and rapidly changing environment.This role sits at the intersection of three of Circle's highest-stakes threat surfaces: our blockchain and custody environments (USDC issuance, Arc, on-chain monitoring), our cloud-native infrastructure (AWS + EKS), and the AI tooling Circle adopts internally and ships in product. You'll build detection coverage and response capability across all three; not as a generalist, but as a Principal who can go deep on each.Also note that this position will require you to perform on-call duties mainly during working hours to support security operations, and you will assist the team with the occasional night time and weekend incident. We would also like someone with a strong response background and some exposure to insider risk.What you'll work on:Proactively identify and respond to emerging security threats across cloud, endpoint, blockchain, and AI surfaces.Build detection and response capability for blockchain and crypto-native threats: on-chain anomalies, custody-vault interactions, wallet abuse, smart contract exploitation, and protocol-level attackers targeting USDC and Circle's blockchain products.Develop detection coverage for cloud-native attacks across AWS + EKS: IAM compromise, identity federation abuse, lateral movement in containerized workloads, runtime exploitation, and misconfiguration drift.Extend detection for AI-specific risks: shadow AI adoption, unauthorized AI integrations, agentic workflows and MCP/tool abuse, and AI-driven credential exposure.Advance deployment of AI to the SOC function including detection triage, enrichment, and analyst-acceleration workflows.Develop plans to manage and maintain core tooling, such as SIEM and Orchestration platforms.Identify gaps in our infrastructure, and work with business partners to gain visibility through logging and detection.Lead and respond to incidents and collaborate across teams to investigate and resolve.Develop detection techniques to identify anomalous behaviors and attacks across the environment.Provide security guidance to various organizations throughout the company.Support broader security team projects such as threat modeling, vulnerability scanning, audits, and custom tool building.Take on-call shifts (every 3rd week and occasional weekend).What you'll bring to Circle:Strong ability to work collaboratively across teams during high-stress situations, which sometimes involves after hours work.Ability to manage multiple competing priorities and use good judgment to establish order of priorities on the fly.Self-motivated and creative problem-solver able to work independently with minimal guidance.Experience/familiarity with Slack, Apple macOS, and GSuite.We're looking for strong, impactful work experience, which typically includes:10+ years of experience in detection, response, or security engineering.3+ years of experience commanding security incidents, especially those involving engineering.Deep cloud security knowledge in AWS environments: IAM, identity federation, KMS, EKS/container attack patterns, runtime exploitation, and CSPM tooling (e.g., Wiz). Some exposure to GCP or OCI is preferred.Working knowledge of blockchain and crypto-native threats: wallet and custody attack patterns, on-chain monitoring, protocol-level risks, and smart contract abuse. Direct experience defending blockchain, custody, or DeFi infrastructure is strongly preferred.Hands-on experience using AI tooling both to accelerate work and to address threats, coupled with a strong understanding of the organizational risks AI introduces shadow AI, agentic workflows, MCP/tool integrations, and strategies to defend against them.Extensive knowledge of SIEM, Case Management, and SOAR solutions (e.g., Panther, Tines).Knowledge of operating systems, file systems, and memory on macOS.Programming experience in Python, Golang, or similar programming languages.Experience with building Detections As Code.You are the right person if you:View Security Detection & Response as a data and engineering problem.Exude positivity.Aren't afraid to share your ideas.Meet problems head-on and view them as opportunities.Are self-reliant and motivated.Communicate fearlessly.Circle is on a mission to create an inclusive financial future, with transparency at our core. We consider a wide variety of elements when crafting our compensation ranges and total compensation packages.Starting pay is determined by various factors, including but not limited to: relevant experience, skill set, qualifications, and other business and organizational needs. Please note that compensation ranges may differ for candidates in other locations.Base Pay Range: 110,000.00 - 170,000.00We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status, or any other protected status required by the laws in the locations where we hire. Additionally, Circle participates in the E-Verify Program in certain locations, as required by law.Should you require accommodations or assistance in our interview process because of a disability, please reach out to accommodations@circle.com for support. We respect your privacy and will connect with you separately from our interview process to accommodate your needs.#LI-RemoteJob SummaryJob number: JR101051Profession: Security

Who We AreCross River builds the infrastructure behind the world’s most innovative financial products. Our technology and capital solutions power payments, cards, lending, and digital asset capabilities that move money safely, instantly, and inclusively — trusted by leading fintechs, enterprises, and disruptors across the globe.Our mission is simple: to build the financial infrastructure that expands access and opportunity for all. Guided by a culture of collaboration, curiosity, and purpose, Cross River has been named one of American Banker’s Best Places to Work in Fintech year after year. Whether you’re designing code, solving regulatory puzzles, or developing strategy, you’ll join a team where innovation and integrity drive everything we do — and where your work helps shape the future of finance.About Our TeamCross River’s team is made up of problem solvers hungry to build and perfect new products and systems. We work with team members in most US time zones. Although we are in separate places, we still make space to know one another and have fun! We collaborate, help and mentor each other, and check in on our progress and blocks frequently.What We’re Looking ForThis role plays a critical role for Cross River and will report to the Head of Enterprise Systems. We are seeking a strategic and technically proficient VP, Enterprise Systems, Workday to lead the design, implementation, and optimization of our Workday platform including the significant number of integrations to and from the Workday Financials and HR platforms. In this role, you will act as a cross-functional expert, ensuring the platform supports our financial operations, compliance requirements, and growth goals within the dynamic and highly regulated financial services industry. As a key member of the Workday technology team, this role is responsible for aligning Workday and its technical capabilities with Finance’s business goals, ensuring a scalable and efficient Finance ecosystem that supports regulatory compliance and industry best practices.Responsibilities:Serve as the Workday subject matter expert across Finance and HR including Finance Modules (Financial Accounting, Banking & Settlement, Customer Accounts, Supplier Accounts, Business Assets, Projects (Capital Projects), Procurement, Accounting Center, Prism) and HCM modules (e.g., Core HCM, Talent, Advanced Compensation, Absence, Benefits, Payroll, Time Tracking, and People Analytics).Define the architecture and roadmap for Workday Financials and HR modules, including Core Financials, Procurement, Payables, Receivables, Projects, and Financial Reporting and Planning.Translate complex financial and business requirements into scalable, integrated Workday solutions.Ensure alignment of Workday architecture with enterprise financial and HR strategies and regulatory standards.Design the overall architecture and roadmap for Workday aligned with Finance and HR business objectives.Collaborate with Finance, Accounting, Procurement, HR, Ops, Legal, FinTech, and IT stakeholders to deliver cohesive Finance and HR technical solutions.Architect integrations between Workday and external systems (treasury, HR/Benefits providers, FP&A, tax engines, etc.) using Workday tools like Studio, EIB, and Cloud Connect.Establish and enforce data governance and quality standards for financial data within Workday.Provide thought leadership, training, and mentorship to functional and technical teams.Lead the architectural design of Workday solutions, including new module rollouts, enhancements, and integrations.Develop and maintain architectural standards, best practices, and governance procedures.Translate business requirements into scalable Workday configurations and technical solutions.Oversee end-to-end Workday implementation projects or major updates.Identify and recommend automation and optimization opportunities across HR processes.Conduct impact analysis and regression testing for Workday updates/releases.Ensure solutions meet data privacy, SOX, and regulatory compliance standards relevant to the financial services industry.Define role-based security models in Workday, ensuring data integrity and confidentiality.Work with external vendors, consultants, and Workday partners to manage project deliverables.Manage business process flows, model‑driven apps, and training.Execute day‑to‑day tasks, maintain high‑performing system.Provide platform support and develop user capability.Document processes and development requirements.Collaborate with developers, integrators, and business partners on system enhancements/upgrades and ensure architecture implications are fully understood and planned for.Work collaboratively with team members to troubleshoot and resolve Operations/ERP issues.Update and coordinate system configuration changes to enable new processes.Manage system updates: collaborate in planning, coordinate system downtime and backup.Provide technical support to end users, diagnosing and resolving problems - Document system configuration and changes.Required Qualifications:Bachelor’s degree in Information Systems, Accounting, Finance, or a related field.7+ years of experience with Workday, including at least 3 years in a lead or architect role within Workday Financials and/or HCM.Deep understanding of accounting, procurement, and financial operations processes.Proven experience designing and implementing Workday architecture at a large or mid-sized organization.Workday certification in Financials and related modules (FDM, Procurement, Projects, Planning).Experience in financial services firms, such as banks, fintechs, or insurance.Experience with global financial compliance and multi-entity, multi-currency configurations.Strong analytical, problem-solving, and project management skills.Excellent communication and collaboration with both technical and non-technical stakeholders.Knowledge of industry financial regulations and risk management practices.Experience with Workday Studio, EIB, or Report Writer is a plus.Familiarity with compliance standards such as SOC, SOX, GDPR, and FFIEC guidelines.Strong analytical and problem-solving skills with attention to detail.Excellent communication and stakeholder management abilities.Project management experience with Agile or Waterfall methodologies.Ability to work in a fast-paced, regulated environment.Experience building relationships with internal customers and stakeholders.Prior work experience as a Business Analyst or Systems Analyst capturing, analyzing, and translating business requirements, specifications, processes, and business cases.Creative thinking with the ability to multi-task - Commitment to ongoing professional development.Assist with user documentation and troubleshooting of technical issues with the platform.Been involved in supporting a user training program - to enable other colleagues to support and learn how best to use the system.Knowledge of how to manage and maintain user permissions, security roles and security teams.Strong interpersonal skills and ability to be able to work comfortably with both technical and nontechnical stakeholders.Ability to respond in a flexible and adaptive manner to support business requirements, when ad hoc requests are made.Knowledge of reporting architecture and Power BI would be an added advantage.Preferred skills such as Visio and Excel, and basic SQL knowledge are a plus.Workday certifications are a plus.Preferred Qualifications:Proven track record of Workday Financials implementations in a financial services environment.Expertise with Finance Regulatory and Management reporting through Workday.Expertise in Workday Financial Data Model (FDM), security, and reporting.#LI-AC1 #LI-Hybrid #LI-OnsiteSalary Range: $180,000.00 - $220,000.00Cross River is an Equal Opportunity Employer. Cross River does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need.By submitting your application, you give Cross River permission to email, call, or text you using the contact details provided. We will only contact you with job related information.

Are you ready to make an impact at DTCC? Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential infrastructure capabilities to meet client needs and implementing data standards and governance.Pay and Benefits:Competitive compensation, including base pay and annual incentiveComprehensive health and life insurance and well-being benefits, based on locationPension / Retirement benefitsPaid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).The Impact you will have in this role:Being a member of IT Cybersecurity Engineering and Operations at DTCC, the Data Protection Senior Asscociate supports first‑line operational execution of DTCC’s Data Protection Program, with a primary focus on DLP operations and AI‑related data loss prevention (AI DLP).This role is responsible for monitoring, triaging, and responding to DLP and AI proxy alerts, validating potential data loss events, and driving remediation or escalation in accordance with established procedures. The Analyst works closely with Content Engineering and AI Data Security Engineering teams to feedback signal quality issues and help improve AI protection outcomes over time.This is an operational role, not a policy or platform engineering role, but it requires a strong understanding of how AI and DLP controls work in practice to make sound triage and risk decisions. Your Primary Responsibilities:DLP & AI DLP Alert Monitoring and TriageMonitor and triage alerts across data protection enforcement points, including: Enterprise DLP (email, endpoint, web, SaaS)AI‑related channels (e.g., AI proxy–mediated GenAI interactions, Copilot and AI tool usage where alerts are raised) Assess alerts for validity, severity, and potential data exposure, distinguishing true risk from false positives.Prioritize and process events in line with defined SLAs and escalation thresholds. AI Data Loss Investigation & ResponseReview AI‑related DLP events such as: Sensitive data detected in prompts submitted to AI toolsSensitive content detected in AI responsesPolicy violations involving AI agents or copilots Perform first‑level investigation to determine: Data type and sensitivitySource system and user contextLikely intent vs. accidental exposureExecute defined response actions (user outreach, enforcement confirmation, escalation) and document outcomes. Case Management, Escalation & RemediationMaintain accurate case records for DLP and AI DLP incidents, including investigation notes, actions taken, and resolution status.Escalate complex or high‑risk events to Tier 2 (engineering, insider threat, incident response) as required.Partner with IAM, Cloud Operations, and Insider Threat teams to support remediation activities. Signal Quality Feedback & Continuous ImprovementsIdentify recurring false positives, detection gaps, and operational friction within AI and non‑AI DLP alerts.Provide actionable feedback to Content Engineering and AI Data Security Engineers to support rule tuning and control improvementsContribute to improvements in alert routing, triage workflows, and runbooks.Metrics, Reporting & EvidenceSupport production of operational metrics related to: Alert volumes and trendsSLA performanceAI DLP incident types and outcomes Ensure operational evidence (case records, alert artifacts) is complete and audit‑ready.Assist with internal reviews or regulatory evidence requests as needed (first‑line support role).Stakeholder Interaction & User SupportConduct professional, risk‑appropriate interactions with employees when investigating DLP or AI DLP events.Educate users on acceptable use and safe handling of data in AI tools when appropriate, in line with defined scripts and guidance.Support consistent and measured user experience to avoid unnecessary friction that drives control bypass. NOTE: The Primary Responsibilities of this role are not limited to the details above.*Qualifications:Min 6 years of relevant experienceBachelor’s Degree and/or equivalent experienceTalents Needed for Success:5–8+ years (Senior Analyst) in security operations, DLP operations, SOC, or data protection roles.Experience triaging security or DLP alerts in a production environment.Working understanding of: Data Loss Prevention (DLP) conceptsData classification and sensitivity handlingAI‑related data risk patterns (e.g., sensitive data submission to AI tools) Strong investigative, documentation, and judgment skills.Exposure to AI proxy or AI usage monitoring from an operational perspective.Experience with Microsoft Purview, Zscaler, or similar DLP platforms.Familiarity with tiered security operations and escalation models.Strong Excel and ticketing / case management skillsThe salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. With over 50 years of experience, DTCC is the premier post-trade market infrastructure for the global financial services industry. From 20 locations around the world, DTCC, through its subsidiaries, automates, centralizes, and standardizes the processing of financial transactions, mitigating risk, increasing transparency, enhancing performance and driving efficiency for thousands of broker/dealers, custodian banks and asset managers. Industry owned and governed, the firm innovates purposefully, simplifying the complexities of clearing, settlement, asset servicing, transaction processing, trade reporting and data services across asset classes, bringing enhanced resilience and soundness to existing financial markets while advancing the digital asset ecosystem. In 2024, DTCC’s subsidiaries processed securities transactions valued at U.S. $3.7 quadrillion and its depository subsidiary provided custody and asset servicing for securities issues from over 150 countries and territories valued at U.S. $99 trillion. DTCC’s Global Trade Repository service, through locally registered, licensed, or approved trade repositories, processes more than 25 billion messages annually. To learn more, please visit us at or connect with us on LinkedIn, X, YouTube, Facebook and Instagram. DTCC proudly supports Flexible Work Arrangements favoring openness and gives people freedom to do their jobs well, by encouraging diverse opinions and emphasizing teamwork. When you join our team, you’ll have an opportunity to make meaningful contributions at a company that is recognized as a thought leader in both the financial services and technology industries. A DTCC career is more than a good way to earn a living. It’s the chance to make a difference at a company that’s truly one of a kind.Learn more about Clearance and Settlement by clicking here.Full timePosting Date: 2026-08-17

VPN, email security, endpoint protection)Partner with Information Security and IT teams to support incident response and system improvementsAssist with routine maintenance, documentation, and configuration updatesContribute to the continuous improvement of security monitoring and detection capabilit

Senior Security Operation Center (SOC) Analyst – L2Cyber | New York, NYReports to: Cyber Incident Response ManagerRole OverviewWe are looking for a Senior SOC Analyst, within the Cyber Incident Response team to be an L2: this is a professional responsible for protecting computer systems, networks

DTCC, headquartered in New Jersey, seeks a skilled SOC analyst to monitor, investigate, and respond to cyber security events within a hybrid environment.You will lead investigations, produce clear security reports, and mentor junior staff while collaborating with the CMIR team.Expect up to 10% trave

Key Responsibilities Professionals in this role may contribute to: SOC Alert Review & Investigation Evaluation Review, monitor, and evaluate SOC alerts and investigation outputs based on predefined scenarios and criteria Distinguish true positives from false positives by validating alert context, in

About the Role Merci Technologies is seeking a SOC Analyst II to join a 24/7 security operations team supporting one of our enterprise clients. Key Responsibilities Monitor, triage, and investigate security alerts across SIEM, EDR, identity, and email security platforms Own Tier 2 investigation, con