{"id":3365480,"url":"https://alion.io/job/lead-bank-senior-security-analyst","title":"Senior Security Analyst","company":{"id":678834,"name":"Lead Bank","domain":"lead.bank","url":"https://alion.io/company/lead-8","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":88,"open_postings":16,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":152000,"max_usd":290000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"ETL/ELT","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST CSF","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-27T21:44:05Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-30T03:42:49Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"About Lead Bank\nLead is a banking infrastructure platform trusted by the most innovative companies to power complex financial products. We enable fintechs to offer compliant, programmable services like payments, lending, and digital assets at scale. Banking has moved beyond traditional institutions and is now embedded directly into everyday experiences, meaning companies need modern infrastructure that is safe, secure, and operationally sound.\nToday, Lead is one of the only API-first, developer-focused partner banks with the financial, regulatory, and legal expertise required to help fintechs succeed. We operate offices in San Francisco, Sunnyvale, and New York City, and an FDIC-insured bank in Kansas City.\nInformation Security Team at Lead\nThe Information Security team helps Lead stay nimble enough to move fast without compromising on safety. They own cybersecurity, overseeing detection and response, and building security controls for all data networks, cloud infrastructures, and IT systems. Working closely with the Risk, Compliance, and Audit teams, they ensure Lead meets and stays up to date on all security standards. Scaling the systems that protect Lead and the fintechs we serve requires critical thinking, good judgment, and an ownership mentality. This is a collaborative team of builders who approach problems creatively, constantly iterating to improve the security of our platform.\nRole Description\nLead Bank is looking for a Senior Security Analyst to join our Security Operations team. You'll be a core contributor to our detection and response capabilities - building detections, triaging alerts, responding to incidents, and proactively hunting threats across cloud infrastructure, security tooling, and data pipelines. You'll mentor junior analysts and partner with leadership to drive our security posture forward. Your expertise will be vital in navigating the complex regulatory landscape of the banking industry and defending against advanced persistent threats.\nIn this role you will:\nBuild, tune, and maintain detection rules and alerts in our SIEM, writing queries to identify threats and coverage gaps aligned to MITRE ATT&CK\n\nOwn incident response execution end-to-end - containment, eradication, recovery, and lessons learned - including forensic log analysis and post-incident reporting\n\nMonitor and investigate security events across endpoints, cloud (AWS), identity, and network telemetry - identifying misconfigurations, anomalous activity, and suspicious behavior\n\nAssist with security audits and regulatory examinations, ensuring timely and accurate security documentation and evidence is provided\n\nAnalyze systems, applications, and networks for security configurations in partnership with security engineers.\n\nManage log pipelines including ingestion, parsing, normalization, and enrichment to ensure high-fidelity data is available for detection and investigation\n\nTriage and prioritize vulnerability findings using risk-based frameworks and track remediation SLAs with IT and Engineering\n\nCollaborate with Engineering on IaC and CI/CD security reviews, and contribute to runbooks and playbooks\n\nPerform all other duties as assigned\n\nWhat we are looking for:\nRequired\n5+ years in information security or security operations\n\nHands-on SIEM experience with query writing, detection building, and alert tuning\n\nStrong working knowledge of cloud security concepts and services (AWS preferred; GCP and Azure also considered)\n\nProficiency working with logs across endpoint, cloud, network, identity, and application sources\n\nUnderstanding of CI/CD pipelines and IaC (Terraform, CloudFormation) from a security perspective\n\nSolid grasp of Windows, macOS, and Linux internals - processes, persistence mechanisms, and attacker TTPs\n\nDemonstrated IR experience, including leading or contributing to investigations\n\nFamiliarity with data normalization, log parsing, and ETL concepts\n\nStrong written and verbal communication skills\n\nPreferred\nExperience with log routing, transformation, and enrichment\n\nHands-on experience with an enterprise EDR/XDR platform and its ecosystem tooling - SOAR, exposure management, and identity protection\n\nExperience with network security tools and interpreting proxy or web traffic logs Background in a regulated industry (financial services, healthcare) with familiarity with NIST CSF, GLBA, or FFIEC\n\nScripting or automation experience (Python, Bash) for detection engineering, workflow automation, and version-controlled code in GitHub\n\nRelevant certifications: CISSP, GCIH, GCIA, GCED, CEH, GDSA, or equivalent\n\nNice to Have\nDetection as Code experience using version-controlled detection content\n\nExposure to identity security tooling\n\nWhat we offer:\nAt Lead, we design our benefits to support company culture and principles, to foster an efficient and inspiring work environment, and to create the conditions for our team to give their best in both work and life\nCompetitive compensation based on experience, geographic location, and role\n\nMedical, Dental, Vision, Life, 401k Matching, and other wellness benefits, including FSA, HSA and HRA\n\nPaid parental leave\n\nFlexible vacation policy, including PTO and paid holidays\n\nA fun and challenging team environment in a dynamic industry with ample opportunities for career growth\n\n*Lead Bank is proud to have an inclusive culture committed to ensuring equal employment opportunity in all employment decisions regardless of race, color, gender, national origin, religion, age, disability, sexual orientation, gender identity, military status, veteran status or any other legally protected status.\n*Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.\n**Our compensation reflects the cost of labor across several US geographic markets. Pay is based on a number of factors and may vary depending on geographical market location, job-related knowledge, skills, and experience. These ranges may be modified in the future.\nZone 1: $142,875 - $170,910 (NYC)\n#LI-AG1","description_format":"text","description_chars":6048,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Flexible vacation policy","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","Financial Software & Embedded Finance"],"lifecycle":[{"event":"open","at":"2026-10-27T22:55:06Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 9 · green card filings: 3","filings_12m":9,"filings_prev_12m":7,"green_card_filings_12m":3,"median_offered_wage_usd":215000,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":66,"band":"ok","label":"Likely open","p_open":1,"p_active":0.662,"p_room":1,"age_days":1,"expected_fill_days":36,"reasons":["conf:0","stale_co","urgency","win:early"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/lead-bank-senior-security-analyst","json_url":"https://alion.io/job/lead-bank-senior-security-analyst.json","meta":{"generated_at":"2026-10-30T05:33:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7737,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678834},"rest":"https://alion.io/mcp/rest/get_company?id=678834"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flead-bank-senior-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flead-bank-senior-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flead-bank-senior-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lead-bank-senior-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flead-bank-senior-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3365480}},{"tool":"search_jobs","arguments":{"company":"lead.bank","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3365480},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}