Senior Security Operations Analyst (Detection & Response)

Your work directly helps homeowners access their wealth, achieve financial flexibility, and realize life changing goals.

• Game-changing Product: We're building a category defining company in home equity. We’ve earned a 4.7 Trustpilot rating and an A+ from the BBB, a testament to the value we provide to our 20,000+ customers.
• Remote First Culture, Genuine Connection: Work from anywhere in the U.S. while staying closely connected through virtual collaboration, team gatherings, and a people-first culture. Select roles may require onsite work at our Palo Alto office one day per week.

Local or 100% Remote Point Digital Finance is expanding its Information Security function, and this is the team's first dedicated monitoring and response hire — a high-visibility role with immediate, measurable impact. As Senior Security Operations Analyst (Detection & Response), you will be the second half of an incident-response rotation, partnering directly with the security lead to detect, investigate, and contain threats across a regulated consumer-finance environment that protects the financial data of hundreds of thousands of homeowners. This is not an alert-watching seat: you will engineer the detections, automate the response, and harden how we see our AWS, Google Workspace, and SaaS estate. You'll help stand up a modern detection & response practice from an early-stage footing, with the autonomy to own problems end to end and the mandate to turn noisy alerts into fast, repeatable, well-documented response. If you like building as much as responding — and want your work to directly reduce risk to real people's financial lives — this role is for you. Check out our latest Engineering Blog to learn more about why it's a great time to join Point's Engineering team! Rotate on-call and lead response: share the 24/7 on-call and incident-response rotation with the security lead — triaging, investigating, and driving containment of security alerts and incidents. Engineer detections: build, tune, and maintain SIEM detections, correlation rules, dashboards, and reporting in Coralogix across cloud and identity log sources. Own vulnerability management: run day-to-day vulnerability management — prioritize findings, coordinate remediation with system owners, and report on risk reduction across cloud and endpoints. Add operational redundancy: serve as a redundant administrative and response path so containment is never bottlenecked on a single person. Report and evidence: produce recurring security metrics and reporting for leadership, and supply control evidence for audits. Improve the program: contribute to continuous improvement of the security-operations program, tooling, and threat monitoring. 5+ years of experience in security operations, incident response, SOC, or detection engineering (mid-to-senior individual contributor).

• Hands-on experience running or actively participating in an on-call / incident-response rotation, independently.
• Strong SIEM skills — authoring and tuning detections, correlation rules, and dashboards (Coralogix, Splunk, Elastic, Microsoft Sentinel, or similar).
• Practical cloud security experience in AWS and Google Workspace, including identity and log sources.
• phishing/AiTM, account takeover, business email compromise, and cloud/identity threats.
• Scripting and automation ability (Python or similar) for detection-as-code and SOAR-style workflows.
• Clear written and verbal communication — able to produce runbooks, metrics, and audit-ready documentation.
• Authorized to work in the United States, and able to participate in an off-hours on-call rotation.

Hands-on experience using AI/LLMs for security analysis, investigation, and alert engineering (detection authoring, correlation, tuning, and automation). Experience in a regulated financial-services or fintech environment (GLBA, NYDFS Part 500, SOC 2). GCIA, GCIH, GCED, GIAC, CySA+, Security+, or AWS Security Specialty). This does not include any other potential components of the compensation package, including equity, benefits, and perks outlined above. At the launch of each position, we benchmark compensation to the appropriate role and level utilizing competitive compensation data from various data sources as references. Location Requirement: This is a remote position. However, candidates must reside in one of Point’s states of operation: We provide comprehensive medical, dental, and vision plans with options for flexible spending accounts (FSA) and health savings accounts (HSA). Recharge with unlimited paid time off and 10 company holidays. Flexible remote and onsite work: We support fully remote work and also have an amazing in-person environment in our downtown Palo Alto, CA HQ. In addition, employees also receive 4 weeks of fully paid transition time, during which you may work 2–3 days per week while receiving full base pay. Equity: We offer meaningful equity because we believe in sharing the value you help create. Your contributions directly impact our growth, and your equity gives you a stake in our future success. Financial wellness: We provide 401K retirement plans for employees as well as guaranteed life insurance and short- and long-term disability coverage. Extra work/life benefits: We provide monthly stipends for internet, mobile plans, wellness perks, a one-time home office reimbursement, and company provided equipment including a MacBook and monitor. We provide employment opportunities regardless of age, race, color, ancestry, national origin, religion, disability, sex, gender identity or expression, sexual orientation, veteran status, or any other protected class. Each individual at Point brings their own perspectives, work experiences, lifestyles, and cultures with them, and we believe that a more diverse team creates more innovative products, provides better services to customers, and helps us all grow and learn.