Information Security Operations Analyst

Salary: $108000 - 146000 per year Requirements: We look for at least 3 years of experience in an in-house SOC environment. We expect familiarity with AWS security solutions, or comparable public cloud security platforms. We value hands-on experience with cloud analysis and incident response across GCP and AWS. We want experience supporting analytics and SIEM platforms. We look for a background in supporting and delivering incident response engagements. We value experience in endpoint-based investigations. We look for experience in cloud-based investigations. We prefer experience with incident command and tabletop exercises. We need excellent verbal and written communication skills, including the ability to explain technical ideas to both technical and non-technical audiences. We value strong teamwork and collaboration in cross-functional environments. We look for effective time management, problem-solving, and interpersonal skills. We want someone eager to learn and apply knowledge to new security challenges. We value a willingness to share expertise with the team and mentor colleagues. We expect a solid understanding of mobile, network, and operating system security controls. We consider 3+ years in cyber incident response and digital forensics an advantage. We prefer forensic experience across cloud, endpoint/server, and/or network environments. We welcome programming experience in Python, Go, and/or Java. A cyber or information security degree and/or relevant certifications would be desirable, though not essential. We value understanding of malware analysis techniques. Responsibilities: We provide triage, response, and investigation for security alerts from multiple sources, including cloud infrastructure and security tooling, endpoint detection and response, and perimeter detection systems. We investigate and respond to security alerts raised by users. We build and refine analytic triggers to improve alert effectiveness. We continuously develop our incident handling and readiness processes. We carry out proactive threat hunting using threat intelligence. We document incidents and investigations thoroughly. We support our 24/7 operational coverage alongside colleagues in Sydney, Toronto, and the UK. We work with leading SecOps professionals to help protect our customers, assets, and systems using modern technologies. Technologies: AWS Cloud GCP Support Java Mobile Network Python Security Linux macOS Windows More: We are Starling Group, a fast-growing fintech business built on technology and innovation. Our ecosystem includes our fully licensed UK bank, Engine by Starling, our global SaaS platform, and a growing portfolio of specialist financial and software companies. Although our roots are in the UK, we operate internationally, and this role supports our businesses worldwide. We work in a fast-paced, flat, and collaborative environment where ownership, innovation, and knowledge-sharing are central to how we operate. We offer a hybrid working approach, with preference for candidates based within commuting distance of Toronto so we can collaborate in person. Our benefits include a discretionary monthly benefits stipend and 20 days of annual leave plus public holidays. We also support inclusive hiring, welcome candidates with disabilities, and encourage applications even if not every requirement is met. last updated 28 week of 2026