Principal Analyst, Security Operations

About the Role

We are looking for an experienced Principal Analyst – Security Operations to strengthen security posture across on-premises and cloud environments. This role focuses on vulnerability remediation, security patch management, end-of-life (EOL) risk management, and security automation.

The ideal candidate is a hands-on cybersecurity professional who remains actively involved in technical implementation and operations, drives process improvements, and collaborates with infrastructure, application, and security teams to address complex security risks.

What You'll Do

• Manage the end-to-end security patching lifecycle, ensuring timely remediation of vulnerabilities and EOL software risks across systems and platforms.
• Assess and prioritize security vulnerabilities based on threat intelligence, severity, business impact, and regulatory requirements.
• Develop, maintain, and enhance security automation scripts and workflows using Python, Shell, PowerShell, or other scripting languages.
• Improve security operations dashboards and reporting using JIRA, Power BI, Power Automate, and API integrations.
• Track and automate security operations metrics, reporting, and performance monitoring.
• Review security deviation and exception requests, assess associated risks, and recommend appropriate mitigation controls.
• Support security operations initiatives involving automation, security patching, and Identity and Access Management (IAM).
• Collaborate with infrastructure, application, and information security teams to resolve complex security issues and communicate remediation requirements effectively.
• Ensure security processes and documentation align with internal security standards and applicable regulatory requirements.

Must-Have Requirements

• A university degree in Computer Science, Computer Engineering, Information Security, Information Systems, or a related field.
• 7–15 years of relevant technical experience, including substantial hands-on cybersecurity experience, ideally within a regulated industry such as banking, insurance, or fintech.
• Strong hands-on experience in vulnerability management, security patching, EOL remediation, and security operations.
• Practical scripting and automation experience using Python, Shell, PowerShell, or similar languages.
• Experience with cloud environments such as Azure, AWS, or GCP, with an understanding of containers, Kubernetes, and microservices architecture.
• Experience implementing security tools, improving operational processes, and maintaining technical documentation.
• Strong analytical and problem-solving skills, with the ability to assess security risks and prioritize remediation based on data and business impact.
• Good communication skills, with the ability to explain security findings, remediation requirements, severity, and potential business risks to technical and non-technical stakeholders.
• A strong willingness and ability to remain actively involved in hands-on technical implementation and operations, rather than focusing primarily on people management or strategic oversight.

Nice to Have

• Experience with Power BI, Power Automate, JIRA, dashboard visualization, and API integration.
• Previous experience as a developer, DevOps Engineer, or Site Reliability Engineer (SRE).
• Familiarity with MAS Technology Risk Management (TRM) guidelines or similar regulatory frameworks.
• Relevant certifications such as CISSP, CEH, ECSA, CSA, GSOC, or equivalent qualifications.

What We Offer

• Opportunities to contribute to enterprise-level cybersecurity and security operations initiatives.
• Exposure to complex security environments across on-premises and cloud platforms.
• Opportunities to improve security automation, vulnerability remediation, and operational processes.
• Full-time employment under a one-year contract, renewable based on performance.
• Overtime compensation through time off in lieu, subject to applicable terms and conditions.