About the role
Hiring for a large financial services client. You will be the weekend leader for a security defense organization. You watch for threats, decide fast whether an event needs action, and bring in the right teams. You open response calls, keep leaders informed, and make sure nothing waits until Monday.
What you will do
- Monitor threat intelligence, security alerts, supplier risk signals, and fraud signals
- Decide quickly whether an event needs action
- Bring in the right teams across security operations, threat intelligence, incident response, the command center, supplier risk, and vulnerability assessment
- Open response calls, assign owners, and track first actions
- Escalate to accountable leaders for containment and business impact decisions
- Bridge overnight outsourced monitoring and the in-house response team
What you bring
- 8+ years in a SOC, fusion center, or incident command role with real decision authority
- Skill at triaging threat intelligence, alerts, and fraud signals quickly
- Experience opening response calls, assigning owners, and escalating to leaders
- Experience working with outsourced or managed overnight monitoring
- Broad knowledge across security operations, threat intelligence, incident response, vulnerability management, third party risk, and fraud
Nice to have
- Weekend or rotational duty experience
- ServiceNow, Splunk, and CrowdStrike
- Executive communication skills
Preferred certifications: GCIH, CISSP, CISM, GCED
Technology and frameworks
ServiceNow, Splunk, and CrowdStrike, along with threat intelligence, alert, and fraud signal sources.
Rate:
Not specified
Location:
Remote
IR35 Status:
Outside
Remote Status:
Remote
Industry:
Cybersecurity
Seniority Level:
Senior