SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Honest is a fintech company building financial products designed to be fair, simple, and genuinely useful. They are seeking a Security Operations Specialist to lead their security defense operations in a high-stakes fintech environment.
In this role, you will serve as the primary operator of Honest's security defense, responsible for monitoring, detecting, and responding to threats. You will manage the SOC team and SIEM/SOAR stack, developing and fine-tuning detection rules and playbooks to turn alerts into actionable responses. You'll automate alert responses to minimize fatigue and response time, lead security incident management from detection through post-mortem analysis, and proactively hunt for vulnerabilities in applications and infrastructure before adversaries can exploit them.
You will own Honest's security solutions stack—including EDR, WAF, SOAR, and other tools—serving as the subject-matter expert and internal champion. You'll ensure organizational protocols adhere to industry best practices and regulatory frameworks, staying current with evolving cybersecurity trends and threats to continuously improve the security program.
Key responsibilities include:
- Managing SOC operations and SIEM/SOAR infrastructure
- Developing detection rules, playbooks, and security workflow automations
- Leading incident response and post-incident analysis
- Conducting threat hunting and vulnerability assessments
- Owning and optimizing the security technology stack
- Ensuring compliance with regulatory and industry standards
- Collaborating with multi-national teams on security initiatives
Requirements:
- Problem-solving skills and technical expertise in IT security operations (application, infrastructure, network, and cloud)
- Hands-on experience with EDR, WAF, SOAR, and similar security solutions
- Scripting proficiency in languages such as Python or Go
- Security-first mindset and ability to recover quickly from failures
- Fluent English communication and strong interpersonal skills for multi-national collaboration
Desirable qualifications:
- Security certifications: OSCP, GCIA, GCIH, CISSP, or CEH
- Experience in financial institutions regulated by OJK and Bank Indonesia
- Familiarity with ISO/IEC 27001:2022 controls and audit support
- Cloud-native security tooling experience (GCP, AWS) and infrastructure-as-code knowledge
- Threat hunting, detection engineering, or purple-team experience
- Exposure to regulatory or external audit requests on IT security controls
