Want to know if this job is worth applying to?
Dallas, Texas, United States
Remote only
Not Available
Alkami is the digital sales and service platform provider for U.S. banks and credit unions. Our unified Platform integrates onboarding, digital banking, and data and marketing—each solution can stand alone, but together they deliver more—to help institutions onboard, engage, and grow relationships. As the future shifts toward Anticipatory Banking, we help data-informed bankers meet the moment with technology that drives action.
Founded in 2009, we continue to be recognized for our intentional culture and tremendous growth (Best Place to Work in Fintech; Best & Brightest to Work For Nationally; and Comparably’s Best Company Culture, Best Career Growth, Best Engineering Team, and Best Places to Work in Dallas, among others). We’re building a culture where each Alkamist can perform to their highest potential, and we’re always on the lookout for the best and brightest minds. If you’re ready to experience the power of alchemy - transforming the ordinary into the extraordinary - come join one of the fastest growing SaaS companies in the U.S.
As a remote-first company, most of our positions can be remote in the US, except for key roles, which will be indicated in the Job Title.
Follow us on Glassdoor and LinkedIn!
Key Responsibilities & Duties:
Lead complex incident response activities, including containment, eradication, recovery, and post-incident improvements.
Design, implement, and mature enterprise threat detection capabilities using SIEM analytics, endpoint detection, cloud monitoring, behavioral analytics, and automated response workflows.
Conduct proactive threat hunting to identify advanced attacker behaviors, emerging threats, and indicators of compromise.
Develop and maintain enterprise detection engineering standards, playbooks, tuning methodologies, and quality practices.
Partner with Security Engineering, Infrastructure, Cloud Engineering, Identity, and Application Security teams to strengthen security controls and reduce organizational risk.
Lead forensic investigations across endpoint, network, cloud, identity, and application environments.
Evaluate emerging threats, adversary techniques, threat intelligence, and detection technologies to improve monitoring and response capabilities.
Develop automation and orchestration workflows to improve operational efficiency and response speed.
Establish and report on operational metrics related to detection effectiveness, incident response performance, and security operations maturity.
Advise technology teams on monitoring strategies, logging requirements, incident readiness, and detection coverage.
Mentor Security Analysts through technical guidance, investigation reviews, and knowledge sharing.
Contribute to enterprise security strategy, architecture reviews, and long-term cybersecurity planning.
Collaborate with Risk, Compliance, Internal Audit, and Legal teams to support regulatory, customer, and audit requirements.
Research emerging attack techniques, AI-enabled threats, and evolving security operations technologies to continuously enhance security capabilities.
Qualifications:
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or an equivalent combination of education and relevant experience.
6–10 years of experience in security operations, threat detection, incident response, digital forensics, cybersecurity engineering, or a related information security discipline, including broad experience leading complex enterprise security investigations and detection engineering initiatives across multiple technology domains.
Advanced incident response leadership and threat detection engineering
Expertise with SIEM, endpoint detection and response, cloud security monitoring, identity monitoring, and email security platforms
Advanced threat hunting, digital forensics, malware analysis, and adversary behavior analysis
Expert knowledge of MITRE ATT&CK, threat intelligence, detection engineering, and incident response frameworks
Security automation, orchestration, and operational workflow optimization
Ability to lead complex cross-functional security investigations and influence technical stakeholders
Strong analytical, investigative, and executive communication skills
Ability to independently solve highly complex operational security challenges
Desired Skills:
GCIA, GCIH, GCFA, SC-200, CISSP, or comparable advanced cybersecurity certification
Experience supporting regulated financial services environments
Experience with Microsoft Sentinel, Microsoft Defender, Splunk, CrowdStrike, Chronicle, or comparable enterprise security platforms
Experience developing enterprise detection engineering standards and security automation
Experience leading major incident response activities and security operations maturity initiatives
Not Just Any Company: Alkami has an awesome diverse and inclusive environment. We have a FUN culture and offer great benefits, including remote-first environment, unlimited paid time off, 401(k) with employer match, and more.
Work Authorization: We cannot offer employment sponsorship at this time. Candidates must be eligible to work in the US for full-time employment.
Recruiters: We are not looking for outside recruiting firms to help us in this search. Thank you for understanding.
Pay Transparency: As of January 1, 2023, new states and locales have enacted pay equity laws that require more pay transparency by employers in the following states: California, Colorado (effective January 1, 2021), Connecticut, Maryland, Nevada, New Jersey, New York, Ohio, Rhode Island and Washington.
Alkami Technology is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any Kind: Alkami is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Alkami are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. Alkami will not tolerate discrimination or harassment based on any of these characteristics. Alkami encourages applicants of all ages.
#LI-REMOTE