Senior Security Analyst

**Job Title:**Senior Security Analyst**Contract Type:******Time Type:******Job Description:**The Senior Security Analyst is a key cybersecurity leader supporting the Group’s trading and global assets.The role ensures operational cyber resilience, protects business-critical trading activities, and contributes to the secure rollout of the Group’s multi-cloud strategy (e.g. Azure, AWS).Operating at the center of a fast-moving high-risk environment, the Senior Security Analyst provides advanced threat detection, incident response, leadership, cloud security engineering and advisory support to both IT and business stakeholders. The position is based in Houston, to provide proximity, reactivity, and embedded partnership with Trading, IT, and Corporate Functions.**Main Responsibilities**The main responsibilities of the Senior Security Analyst are:**Security Operations,** **Threat Detection & Incident Response*** Lead analysis and response activities for complex cybersecurity events, ensuring minimal impact to trading operations.* Investigate incidents across cloud, on‑prem, network, endpoint, and identity layers.* Drive containment, eradication, forensic analysis, recovery, and post‑incident improvement actions.* Continuously refine detection engineering (custom SIEM rules, UEBA, automation playbooks).**Cloud Security & Multi-Cloud Architecture*** Design and enforce security controls for Azure & AWS environments, ensuring unified governance across heterogeneous platforms.* Implement identity‑centric security (Zero Trust, Conditional Access, IAM/PAM, role‑based access).* Support secure deployment of cloud‑native workloads, infrastructure‑as‑code, and DevSecOps practices.* Ensure compliance with industry best‑practice frameworks**Project Security & Advisory*** Act as the security representative in strategic IT and business projects, from design through delivery.* Perform architecture reviews, conduct threat modelling, and define risk‑based compensating controls.**Vulnerability & Exposure Management*** Own the end‑to‑end vulnerability lifecycle: discovery, prioritization, risk assessment, remediation coordination, and reporting.* Evaluate emerging threats (CVE analysis, threat intel correlation, exploit likelihood scoring) and drive prioritized mitigation.**Security Monitoring & Analytics*** Manage SIEM, EDR, NDR/IDS, cloud monitoring tools, and security analytics platforms.* Correlate multi‑source data to identify anomalies, insider risks, and advanced persistent threats.**Governance, Risk** **& Compliance*** Contribute to internal and external audits, ensuring adherence to regulatory and corporate security standards.* Apply industry standards and best practices (e.g. NIS, CIS) when necessary.* Participate to the ISO 27k initiative toward the Group compliance objective.* Develop and maintain security policies, standards and operating procedures.* Produce metrics and dashboards to inform executives of risk posture and emerging trends.**Security Awareness & Culture*** Champion cybersecurity culture within Trading and Corporate Functions.* Support targeted training, phishing simulations, and best-practice awareness initiatives.**Mentoring & Leadership*** Mentor junior analysts and coordinate with global counterparts across Geneva, Amsterdam, Singapore, and US.* Build strong relationships with Front Office, IT Operations, Risk, Compliance, and third‑party security partners.**Profile****Education**Certifications :* CISSP (required)* AZ-500 (required)* CISM (- preferred)* CEH, OSCP, AWS Security Specialist (-advantageous)* OSCP (nice to have)**Experience*** +8 years in cybersecurity, with at least 5 years in a senior analyst position or senior consultant role.* Demonstrated experience securing cloud-heavy, high-availability, mission critical environments (preferably trading or financial markets).* Proven track record in incident response, cloud security, and security engineering.**Skills**Technical Skills (by order of priority):* Cloud Security (Azure, AWS, cloud-native security tooling)* Threat Detection & Incident Response* Endpoint Detection & Response* SIEM (Kibana, Sentinel)* Vulnerability Assessment & Management* Network & Endpoint Security* Scripting & Automation* Security Frameworks & Compliance* Digital Forensics & Malware AnalysisBehavioral Competencies* High adaptability and resilience in a fast-paced environment* Strong analytical, problem solving and communication skills* Proactive leadership and autonomy* Ability to influence cross-functional stakeholders and drive change* Detail-oriented, structured, and risk-aware mindsetIf you think the open position you see is right for you, we encourage you to apply!***Our people make all the difference in our success.*** #J-18808-Ljbffr Gunvor Group