Security Analyst, SOC
TradeStation Security Analyst, SOC
#WeAreTradeStation
Who We Are:
TradeStation is the home of those born to trade. As an online brokerage firm and trading ecosystem, we are focused on delivering the ultimate trading experience for active traders and institutions. We continuously push the boundaries of what's possible, encourage out-of-the-box thinking, and relentlessly search for like-minded innovators.
At TradeStation, we are building an AI-First culture. We expect team members to embrace AI as a core part of their daily workflow, whether that’s using AI to accelerate development, enhance decision-making, improve client outcomes, or streamline internal processes. We hire, grow, and promote people who can harness AI responsibly and creatively. We treat AI as a partner in problem-solving, not just a tool; following our governance standards to ensure AI is used ethically, securely, and transparently. If you join us, you’re joining a culture where AI is how we work.
Are you ready to make yourself at home?
What We Are Looking For:
We are looking for a Security Analyst who will be part of the Information Security team. This role will be responsible for the prevention of Cyber Security Incidents utilizing monitoring, detection, and analysis of potential intrusions in a multi-platform environment, including using troubleshooting tools to review and respond to cyber threats, handling or escalating security threats as needed. The position interacts with IT peers to collect and analyze information, maintains system documentation and monitors security vulnerabilities, escalating issues when needed to team members or management.
What You’ll Be Doing:
- Perform daily review and triage of security alerts, dashboards, SIEM/SOAR systems, and threat intelligence platforms
- Monitor, triage, and prioritize security events based on severity, criticality, and potential business impact.
- Validate suspicious events, conduct initial root cause analysis, and escalate confirmed threats appropriately
- Analyze logs and identify, recommend, and improve current logging requirements
- Identify and report any gaps in log collection or reporting, as soon as possible
- Collaborate with the SOC team to continuously eliminate recurring false positive events
- Conduct threat hunting activities using indicators of compromise, and threat intelligence data to identify potential threats, enrich alert context, and support proactive defense efforts.
- Stay current on AI-based attack techniques — adversarial ML, AI-assisted phishing, deepfakes — and support development of countermeasures
- Execute and validate monthly security solution validation processes and health checks
- Collaborate with the Sr. Manager Security Operations for monthly metrics reporting and KPI tracking
- Assist with evaluation of new and existing security tools, platforms, and technologies
- Maintain accurate documentation of incidents, procedures, runbooks, and lessons learned
- Keep current with information security news, threat actor TTPs, industry trends, and emerging attack vectors
- Conduct weekly vulnerability analysis, prioritize findings based on risk, and escalate issues as required
- Assist with other security-related initiatives, projects, and compliance activities as they arise
The Skills You Bring:
- Background in Information Security, Systems Administration, or Information Technology
- Solid understanding of computer networking
- Proficiency with multiple operating systems (Windows, Linux/Unix, macOS), including command-line administration
- Understanding of cloud platform architectures and Cloud security monitoring across one or more major cloud provider environments
- Experience with some or all of the following: Email Analysis, Host Forensics (Windows), Virtualization (VMWare, VirtualBox)
- Vulnerability management: scanning, prioritization, and remediation tracking
- Familiarity with AI-assisted security technologies, including an understanding of how generative AI and large language models (LLMs) are leveraged in both cyberattack techniques and security defense operations.
- Ability to multitask and prioritize in a dynamic environment with continuously shifting priorities
- Must have strong analytical and critical-thinking skills with attention to detail
- Excellent verbal and written communication skills
- Highly motivated self-starter with a commitment to team collaboration
- Commitment to continuous learning and professional growth
- Hands-on experience with at least one enterprise SIEM platform strongly preferred
- Demonstrated experience responding to security incidents in a SOC, MSSP, or equivalent environment
- Exposure to cloud security monitoring and investigation is a plus
- Experience using or evaluating AI-assisted security tools is increasingly valued
Minimum Qualifications:
- Minimum 2 years of experience in Cybersecurity technology or a related technology field role associated to the responsibilities above
- Must be in Costa Rica and able to work core US Eastern Time hours
- Ability to travel to company offices, including international offices, or other locations occasionally as needed for meetings, training, to perform work tasks, etc.
Desired Qualifications:
- Bachelor's Degree in Computer Science/Information Technology/Information Security
- One or more of the following certifications strongly preferred:
- SSCP or CompTIA Security +
- SANS GSEC
- CompTIA Security+
- CompTIA CySA+ (Cybersecurity Analyst)
- GCIA (Intrusion Analyst) or GCIH (Incident Handler)
- Any relevant vendor certification aligned to the organization’s security stack
- Certified SOC Analyst (CSA)
- Certified AI Security Practitioner or equivalent emerging credential (desired / forward-looking)
- Other industry recognized certifications or accreditations
What We Offer:
- Collaborative work environment
- Competitive Salaries
- Yearly bonus
- Comprehensive benefits for you and your family starting Day 1
- Unlimited Paid Time Off
- Flexible working environment
- TradeStation Account employee benefits, as well as full access to trading education materials
#LI-Remote