Security Operations Center, (SOC) Analyst

SOC Analyst

Kora is a global fiat and stablecoin payment infrastructure - the rails that financial institutions, fintechs, and enterprises use to move money across borders reliably and at scale. We operate across multiple markets globally.

We are not a payments app. We are not a wallet. We are the layer underneath: the settlement infrastructure, the compliance engine, the connectivity that makes cross-border payments work for the companies that build on top of us.

Our vision, which is at the core of what we do every day, is to create a world void of digital financial barriers. We are committed to delivering reliable, secure, and easy-to-use digital financial solutions to every single customer with a guarantee that it is improving their lives. To achieve this mission, we need people like you. Yes, you!

We strongly believe in our ability to find Water in the Desert and pick the Sands in the Ocean.

We value positive energy and clear communication, and are committed to building an inclusive environment for people from every background.

About The Role

As a SOC Analyst, you will be responsible for monitoring, detecting, analyzing, and responding to cybersecurity threats and incidents within the organization. This role plays a critical part in maintaining the organization's security posture by leveraging security tools, threat intelligence, and established processes to identify and mitigate risks in real time.

Here are a couple of things you'll be doing:

• Monitor security events and alerts from SIEM, EDR, IDS/IPS, firewalls, and cloud security tools
• Analyze logs and alerts to identify potential security incidents or anomalies
• Perform initial triage to determine severity, impact, and scope of threats
• Escalate validated incidents based on defined procedures
• Investigate and respond to security incidents (e.g., phishing, malware, unauthorized access)
• Contain and remediate threats in collaboration with IT, Engineering and security teams
• Document incidents, actions taken, and lessons learned
• Support post-incident reviews and root cause analysis
• Leverage threat intelligence feeds to identify emerging threats and indicators of compromise (IOCs)
• Conduct proactive threat hunting activities to detect hidden threats
• Update detection rules and use cases based on the evolving threat landscape
• Support vulnerability management activities (scan review, prioritization, remediation tracking)
• Assist in patch validation and security control effectiveness testing
• Collaborate with engineering teams to improve security controls and detection capabilities
• Maintain accurate incident logs and case management records
• Prepare daily/weekly SOC reports and dashboards
• Develop and update incident response playbooks and runbooks

• Other duties as assigned by the CISO.