Security Analyst, CSOC (R14283)

Who We Are
Oportun (Nasdaq: OPRT) is a mission-driven financial services company that puts its members' financial goals within reach. With intelligent borrowing, savings, and budgeting capabilities, Oportun empowers members with the confidence to build a better financial future. Since inception, Oportun has provided more than $22.7 billion in responsible and affordable credit, saved its members more than $2.5 billion in interest and fees, and helped its members set aside an average of more than $1,800 annually.
Location note
We’re excited to consider talent currently based in India, as well as candidates who are open to relocating to India for this opportunity. Please note that, as this is a "Remote–India" position, the role must be performed from within India.
The Opportunity
This newly created role supports Oportun's 24/7 Cyber Security Operations Center by conducting technical analysis of security events and supporting immediate containment, investigation, and remediation. The Security Analyst also helps strengthen defenses by applying knowledge gained throughout the response process.
At Oportun, we move fast and we hold each other to a high bar. If you care about doing your best work while actually moving the needle for real people, you'll fit right in.
What You'll Do
Your day-to-day
Monitor and analyze traffic, security events, and alerts, and advise on appropriate remediation actions.
Review and assess the impact of security incidents and the remediation actions required to address them.
Investigate intrusion attempts and analyze exploits by correlating multiple sources to determine affected systems or data sets.
Follow standard operating procedures for detecting, classifying, documenting, and reporting security incidents.
Analyze network and host-based security appliance logs, including EDR, firewalls, NIDS, HIDS, and system logs, to determine remediation actions and escalation paths.
Independently identify, contain, analyze, document, and eradicate malicious activity in accordance with established procedures.
Escalate intrusion events, security incidents, threat indicators, and warning information to the appropriate client and stakeholders.
Look for practical ways to use AI tools thoughtfully to work smarter, reduce manual work, and make better decisions faster.
Who You Are
The right fit looks like this
You're comfortable working in a fast-paced environment, prioritizing competing demands, and meeting deadlines. You communicate effectively across functional boundaries, build strong partnerships with engineering and security teams, and bring genuine interest in security, technology, and automation.
You're comfortable navigating complexity and don't wait for perfect information to move forward. You communicate clearly, give direct feedback, and expect the same in return.
What You Bring
Skills & experience
Required
You have a bachelor's degree in computer science, information systems, or a related field from an accredited institution, or 2–5 years of relevant experience in SOC, incident response, or cyber forensics.
You have at least 2 years of prior SOC experience, including relevant internships.
You have experience working with Splunk SIEM and analyzing logs from security devices such as firewalls, proxies, and EDR platforms.
You have hands-on experience handling cyber incidents, performing L1 ticket analysis, identifying false positives, and correlating incidents.
You understand network architecture and can connect events logically across systems and environments.
You have working knowledge of the TCP/IP suite and OSI protocol layers, network and systems architecture, and intrusion detection systems.
You understand web application architecture, Active Directory, and major application-layer protocols such as HTTP, SMTP, and DNS.
You understand common malware categories and how they function, including rootkits, trojans, adware, exploits, and fileless malware.
You have strong organizational, time-management, prioritization, documentation, and communication skills, with the ability to work effectively across functional and organizational boundaries.
Nice to Have
You have experience working with or partnering closely with network, engineering, and application teams.
You hold a preferred security certification such as Security+ or a similar credential.
You've used AI tools (ChatGPT, Copilot, or similar) to improve your own p