Ocrolus is a fast-growing financial technology organization with many emerging security threats and we are building a world-class security program to keep Ocrolus and our customer’s data secure.  We are looking for a diverse set of security practitioners to help us design, build, and scale security at Ocrolus.  We value critical thinking, creativity, data-driven and intelligence-driven approaches, and offensive experience.  We believe security is a collaborative and open process, where security is a partner to help achieve business goals securely.  We believe in saying “yes, and” instead of “no” when recommending security objectives.  We don’t believe in using fear or penalty for enforcement of security policies and processes, and we will always provide evidence and justification for security controls.

Responsibilities:

• Triage and investigate security alerts and perform security investigations.


• Design, build, and test detections and alerts that will increase the efficacy of our security program.


• Build and document investigation procedure, response and recovery playbooks, and automation.


• Perform threat hunting, threat intelligence analysis, breach readiness, and red team exercises.


• Provide clear and detailed documentation for detections, investigations, and hunts.


• Build relationships with stakeholders throughout the organization.


• Help build a collaborative and enlightening world-class security team at Ocrolus.


• Spread security culture throughout the organization.

Requirements:

• Experience conducting and managing security investigations.


• Experience running, growing, or scaling a security operations or threat detection and response program.


• Experience engineering and building threat detections, incident response and recovery runbooks, automation and orchestration, and threat hunting.


• Deep knowledge of technology and processes used in security operations.


• Ability to explain basic security, engineering, networking, and cloud concepts.


• Great communication, prioritization, and project management skills