Senior Cybersecurity Analyst

MoneyLion is a leader in financial technology powering the next generation of personalized products and content, with a top consumer finance super app, a premier embedded finance platform for enterprise businesses and a world-class media arm. MoneyLion’s mission is to give everyone the power to make their best financial decisions. We pride ourselves on serving the many, not the few; providing confidence through guidance, choice, personalization; and shortening the distance to an informed action.

In our go-to money app for consumers, we deliver curated content on finance and related topics, through a tailored feed that engages people to learn and share. People take control of their finances with our innovative financial products and marketplace - including our full-fledged suite of features to save, borrow, spend, and invest - seamlessly bringing together the best offers and content from MoneyLion and our 1,100+ Enterprise Partner network, together in one experience. MoneyLion’s enterprise technology provides the definitive search engine and marketplace for financial products, enabling any company to add embedded finance to their business, with advanced AI-backed data and tools through our platform and API. Established in 2013, MoneyLion connects millions of people with the financial products and content they need, when and where they need it.

About the Role

The Kuala Lumpur office is the technology powerhouse of MoneyLion. We pride ourselves on innovative initiatives and thrive in a fast paced and challenging environment. Join our multicultural team of visionaries and industry rebels in disrupting the traditional finance industry!

As a Cybersecurity Analyst, you will be working with the MoneyLion CDOC team that is responsible for threat detection & monitoring, threat prevention & API security, digital forensics & incident response, threat intelligence, and threat hunting. You will play a critical role in developing and implementing strategies to proactively identify and mitigate potential cyber threats before they impact our organization. Your expertise in threat detection and prevention techniques and technologies will be crucial in maintaining the security posture of our systems and infrastructure against threats to MoneyLion. You will also be tasked with analyzing & reviewing security events and escalating them if necessary.

Key Responsibilities

• Monitor network traffic, system logs, and security alerts to identify potential security incidents and unauthorized activities in a timely manner
• Design, deploy, and manage threat detection rules and preventive security controls (eg. firewalls, intrusion detection/prevention systems, endpoint protection, and network segmentation) to safeguard critical systems and data in response to the latest threat landscape
• Identify the gaps in the current threat detection and prevention capabilities and provide suggestions to reduce these gaps
• Continually improve the development of CDOC infrastructure, Engineering standards and architecture
• Collaborate with cross-functional teams to ensure security measures align with business requirements and best practices
• Perform technology research, automation, integrations, and standardization across Cybersecurity and drive the recommended actions
• Utilize SIEM to analyze patterns, behaviors, and anomalies indicative of cyber threats
• Perform in-depth analysis of security events to determine the nature and scope of potential security incidents and recommend risk mitigation strategies. When necessary, carry out digital forensic for reporting and auditing purposes
• Contribute in threat hunting exercises and in various innovative projects to improve MoneyLion’s overall security posture
• Mentor and support junior team members to improve their technical capabilities

About You

• Good working knowledge of information security systems (eg. firewall, IPS/IDS, AV/EDR, SIEM), with proficiency in utilizing SIEM, WAF, and other threat detection and prevention tools
• Strong understanding of cybersecurity principles, networking concepts (eg. HTTP/HTTPS), threat landscapes, and attack vectors
• Excellent analytical and problem solving skills
• Good written and verbal communication skills, and report writing skills to convey technical information to both technical and non-technical stakeholders
• Easily adapt to change, seek new responsibilities, accept challenges and thrive in ambiguity
• Self-motivated, innovative, and a team player
• Ability to work on an on-call basis as required
• Proficient in scripting languages (eg. Python, Bash) to process data and automate tasks
• Bonus points:
• Academic background in Information Technology/Computer Science, Information Security, or related field
• Knowledge of cloud service providers such as AWS
• Familiarity with Linux environment
• GCIH/Security+/CySA+/CEH/ECIH certification

What's Next…

After you submit your application, you can expect the following steps in the recruitment process:

• Online Technical Assessment
• Interview - Interview with Hiring Manager (Virtual or face-to-face)