Senior Security Analyst III

OppFi

2d • $102,400 - $153,600 • Remote

About The Position

As a Senior Security Analyst III, you will contribute to day-to-day security operations, supporting threat monitoring, incident triage, and vulnerability remediation. You will work with senior team members and internal teams to help maintain security, visibility, and compliance standards, while developing skills in cloud environments, incident response, and security best practices.

The role supports security alert monitoring and incident response, vulnerability tracking and posture improvements, security control reporting, and the documentation and improvement of operational processes. It also involves collaborating with teammates to help automate manual security workflows. The position reports to the Manager, Security Operations.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, or equivalent experience.
• 3–5 years of professional Information Security experience, with demonstrated expertise in at least one of Security Operations, Incident Response, or Vulnerability Management.
• Experience with security and control frameworks such as FFIEC, NIST, COBIT, ITIL, or ISO control frameworks.
• Experience with EDR platforms such as CrowdStrike, Defender for Endpoint, or SentinelOne.
• Experience with SIEM/SOAR tools such as Sumo Logic, Splunk, Chronicle, Azure Sentinel, or Google SecOps.
• Experience with CSPM tools such as Wiz, Prisma, or Orca.
• Experience with vulnerability management platforms such as Qualys, Tenable, or Rapid7.
• Experience with next-generation firewall tools such as Cisco FMC, Palo Alto Panorama, or FortiGate.
• Experience identifying potential IT controls risks and opportunities and offering sustainable recommendations that address causes rather than symptoms.
• Experience with information security standards and best practices for securing computer systems within applicable laws and regulations.
• Solid understanding of common attack techniques, including MITRE ATT&CK, incident triage, and remediation workflows.
• Foundational knowledge of AWS or other cloud environments.
• Strong understanding of networking, Linux and Windows operating systems, and security principles such as least privilege and defense-in-depth.
• Hands-on experience or familiarity with API integrations, scripting, or SOAR platforms such as Cortex, Google SecOps, or Splunk SOAR to support automation frameworks.
• Strong written communication skills for developing clear, concise procedures and playbooks, and effective verbal skills for communicating technical findings.
• Experience building dashboards and metrics for leadership visibility.
• Strong analytical and problem-solving skills, attention to detail, and a desire to learn quickly.

Nice To Haves

• Certifications such as CompTIA CySA+, GCIH, GCIA, GMON, GCDA, GSOC, or CISSP associate.
• Firewall management experience.
• Experience working in a regulated industry, such as financial services or health care.

Responsibilities

• Monitor alerts from SIEM, EDR, and cloud log tools; gather initial information to triage potential incidents and escalate to senior engineers as needed.
• Assist with security incident response playbooks, including initial investigation, containment, and documentation.
• Document and track security incidents to support audit and compliance requirements.
• Assist with configuring and tuning SIEM alerts and reports, and support the monitoring and logging strategy.
• Review and analyze logs for suspicious activity under the guidance of senior staff.
• Learn to deploy and manage security tools and assist in developing basic threat detection logic.
• Support vulnerability tracking, replacing standard CVSS tracking with exposure- and exploitability-based risk assessment.
• Identify potential IT controls risks and opportunities and offer sustainable recommendations that address root causes.
• Assist with reporting on the effectiveness of security controls.
• Contribute to developing and maintaining operational playbooks and security process documentation.
• Collaborate with team members to transition manual workflows into automated playbooks and processes.
• Perform other related duties as assigned.

Benefits

• 401(k) matching program
• Generous paid time off
• Medical coverage
• Dental coverage
• Vision coverage
• Tuition reimbursement
• DoorDash DashPass
• Figo pet insurance
• Rocket Lawyer
• Access to LinkedIn Learning
• Fringe lifestyle benefits platform
• Eligibility and potential for performance-based bonuses and equity grants, dependent on role and job level
• Flexible, remote environment

What This Job Offers

• Job Type: Full-time
• Career Level: Senior