Lead Cybersecurity Analyst

MoneyLion is a leader in financial technology powering the next generation of personalized products and content, with a top consumer finance super app, a premier embedded finance platform for enterprise businesses and a world-class media arm. MoneyLion’s mission is to give everyone the power to make their best financial decisions. We pride ourselves on serving the many, not the few; providing confidence through guidance, choice, personalization; and shortening the distance to an informed action.

In our go-to money app for consumers, we deliver curated content on finance and related topics, through a tailored feed that engages people to learn and share. People take control of their finances with our innovative financial products and marketplace - including our full-fledged suite of features to save, borrow, spend, and invest - seamlessly bringing together the best offers and content from MoneyLion and our 1,100+ Enterprise Partner network, together in one experience. MoneyLion’s enterprise technology provides the definitive search engine and marketplace for financial products, enabling any company to add embedded finance to their business, with advanced AI-backed data and tools through our platform and API. Established in 2013, MoneyLion connects millions of people with the financial products and content they need, when and where they need it.

About the Role

The Kuala Lumpur office is the technology powerhouse of MoneyLion. We pride ourselves on innovative initiatives and thrive in a fast paced and challenging environment. Join our multicultural team of visionaries and industry rebels in disrupting the traditional finance industry!

As a Lead Cybersecurity Analyst, you will be working under MoneyLion CDOC which is responsible to identify, protect, detect and respond to threats against MoneyLion. You will be responsible to understand MoneyLion’s corporate and cloud environment, identify its weaknesses and take necessary measures to correct and strengthen its security posture.

What you’ll do:

• Lead and mentor a team of cybersecurity analysts, providing guidance, training, and support to ensure the team’s effectiveness and professional growth
• Prepare and present detailed reports on security incidents, vulnerabilities, and overall security posture to stakeholders
• Monitor network traffic, system logs, and security alerts to identify potential security incidents and unauthorized activities in a timely manner
• Design, deploy, and manage threat detection rules and preventive security controls (eg. firewalls, intrusion detection/prevention systems, endpoint protection, and network segmentation) to safeguard critical systems and data in response to the latest threat landscape
• Identify the gaps in the current threat detection and prevention capabilities and provide suggestions to reduce these gaps
• Continually improve the development of CDOC infrastructure, Engineering standards and architecture
• Collaborate with cross-functional teams to ensure security measures align with business requirements and best practices
• Perform technology research, automation, integrations, and standardization across Cybersecurity and drive the recommended actions
• Utilize SIEM to analyze patterns, behaviors, and anomalies indicative of cyber threats
• Perform in-depth analysis of security events to determine the nature and scope of potential security incidents and recommend risk mitigation strategies. When necessary, carry out digital forensic for reporting and auditing purposes
• Contribute in threat hunting exercises and in various innovative projects to improve MoneyLion’s overall security posture

 About You

• Good working knowledge of information security systems (eg. firewall, IPS/IDS, AV/EDR, SIEM), with proficiency in utilizing SIEM, WAF, and other threat detection and prevention tools
• Proven ability to lead and motivate a team, manage multiple projects, and drive results in a fast-paced environment
• Strong understanding of cybersecurity principles, networking concepts (eg. HTTP/HTTPS), threat landscapes, and attack vectors
• Excellent analytical and problem solving skills
• Good written and verbal communication skills, and report writing skills to convey technical information to both technical and non-technical stakeholders
• Easily adapt to change, seek new responsibilities, accept challenges and thrive in ambiguity
• Self-motivated, innovative, and a team player
• Ability to work on an on-call basis as required
• Proficient in scripting languages (eg. Python, Bash) to process data and automate tasks
• Bonus points:
• Academic background in Information Technology/Computer Science, Information Security, or related field
• Knowledge of cloud service providers such as AWS
• Familiarity with Linux environment
• GCIH/Security+/CySA+/CEH/ECIH certification

What's Next...

After you submit your application, you can expect the following steps in the recruitment process:

1. Online Technical Assignment
2. Interview - Talent Acquisition Team (Virtual)
3. Interview - Hiring Manager interview (Face-to-face)