Staff Data Analyst 

Overview:

As a Staff Data Analyst at Weedmaps, you will shape how the business understands and acts on data insights. You will be a key thought leader helping senior leadership from across the business turn their objectives into data strategies that drive multi-million dollar decisions. Rather than waiting for requests, you will proactively identify opportunities, challenge assumptions with data, and publish insights to the broader cannabis industry. Your strong proficiency in SQL, combined with your resourceful nature, will allow you to transform large, messy data into tangible recommendations for the business. You will also help us migrate from Tableau to a new BI tool, creating dashboards and reports that senior executives will use to run the business.

You will serve as a mentor to more junior colleagues and help improve the quality and sophistication of analysis and visualization. You will help build reusable tools that other analysts can build on, being a force multiplier for the entire team. This is a high-visibility role combining execution with strategic influence.

The impact you'll make:

• Create high quality, scalable analytic and data products, dashboards and reports and Streamlit
• Partner with executives from Product, Marketing, Revenue, and other as their data strategist, becoming a trusted thought partner helping them achieve their objectives with data
• Lead the migration from Tableau to a new BI solution, ensuring minimal business disruption during the process
• Design and build the executive dashboards that run the
  
  Please mention the word **CALMING** and tag RMTU3LjI0NS4yNDcuMTE4 when applying to show you read the job post completely (#RMTU3LjI0NS4yNDcuMTE4). This is a beta feature to avoid spam applicants. Companies can search these words to find applicants that read this and see they're human.

About Keyrock

Since our beginnings in 2017, we've grown to be a leading change-maker in the digital asset space, renowned for our partnerships and innovation.

Today, we rock with over 200 team members around the world. Our diverse team hails from 42 nationalities, with backgrounds ranging from DeFi natives to PhDs. Predominantly remote, we have hubs in London, Brussels, Singapore and Paris, and host regular online and offline hangouts to keep the crew tight.

We are trading on more than 80 exchanges, and working with a wide array of asset issuers. As a well-established market maker, our distinctive expertise led us to expand rapidly. Today, our services span market making, options trading, high-frequency trading, OTC, and DeFi trading desks as well as digital asset management. Keyrock is looking to expand and establish itself as a full-service financial institution through both organic innovation and inorganic growth.

But we’re more than a service provider. We’re an initiator. We're pioneers in adopting the Rust Development language for our algorithmic trading systems, and champions of its use in the industry. We support the growth of Web3 startups through our Accelerator Program. We upgrade ecosystems by injecting liquidity into promising DeFi, RWA, and NFT protocols. And we push the industry's progress with our research and governance initiatives.

At Keyrock, we're not just envisioning the future of digital assets. We're actively building it.

Role Summary

As a SOC Analyst (Level 2), you are the escalation point for complex investigations and active incidents. You’ll take ownership of high-severity alerts, lead technical triage through containment, and coordinate with Incident Response, Cloud/Platform, Identity, and Engineering teams. You’ll also improve SOC quality by tuning detections, refining playbooks, mentoring Level 1 analysts, and driving post-incident learnings into better controls.

What You’ll Do (Core Responsibilities)

Advanced detection and investigation

• Take escalations from L1 and independently investigate complex, multi-signal alerts (identity compromise, cloud control-plane abuse, endpoint persistence, lateral movement, suspicious automation, data exfiltration).

• Perform deep log/telemetry analysis across SIEM, EDR, cloud logs, IAM signals, network telemetry, email security, and SaaS audit trails.

• Build and validate hypotheses, pivot across data sources, and produce clear incident timelines and scope assessments.

Incident response and containment

• Serve as technical incident lead for defined incident types/severities (or co-lead with IR), driving containment and eradication steps within authorized bounds.

• Execute and improve response playbooks for key scenarios (phishing/BEC, credential theft, token/key compromise, suspicious API activity, ransomware indicators, insider risk signals).

• Coordinate evidence collection and preservation to support legal/compliance needs and potential third-party investigations.

Threat intelligence and adversary tradecraft

• Enrich investigations with threat intel (IOCs, TTPs) and map observed behavior to frameworks (e.g., ATT&CK) to improve detection fidelity.

• Maintain watchlists and detection logic for priority threats relevant to cloud-first financial and digital-asset operations.

Detection engineering and SOC improvement

• Tune SIEM correlation rules, EDR policies, and alert thresholds to reduce false positives and increase signal quality.

• Propose and implement new detections for emerging techniques (identity + cloud abuse, OAuth/app consent attacks, API key leakage, CI/CD pipeline tampering).

• Improve runbooks and automate repetitive enrichment steps (SOAR workflows, scripts, queries).

Operational leadership

• Provide mentorship and real-time guidance to L1 analysts; improve escalation quality through coaching and feedback.

• Manage shift handovers for active investigations and ensure high-quality case documentation.

• Contribute to SOC metrics (MTTD, MTTR, false-positive rate, escalation accuracy) and continuous improvement efforts.

What We’re Looking For (Minimum Qualifications)

• 2–5+ years of SOC / incident response / security operations experience (or equivalent hands-on experience in a fast-paced production environment).

• Strong ability to investigate across cloud security operations, endpoint security, identity, and core network fundamentals.

• Proficiency with at least one SIEM and common SOC tooling (e.g., Splunk/Elastic/Sentinel; CrowdStrike/Defender; Jira/ServiceNow).

• Ability to write clear incident documentation: timelines, scope, impact, containment actions, and recommended remediations.

• Comfort operating in an on-call or shift environment (depending on coverage model).

Nice to Have (Preferred)

• Detection engineering experience: correlation rules, Sigma/KQL/SPL, alert pipelines, SOAR automation.

• DFIR fundamentals: triage acquisition, volatile vs. non-volatile evidence, endpoint artifact analysis.

• Container/Kubernetes logging and runtime security exposure.

• Practical scripting (Python/Bash) for analysis and automation.

• Digital-asset ecosystem exposure and 24/7 trading operations familiarity.

• Certifications (optional): GCIH, GCIA, GCED, SC-200, AWS Security Specialty, or equivalent.

What Success Looks Like (First 90 Days)

• Independently lead investigations for high-severity alerts with strong scoping, decisive containment, and clean cross-team coordination.

• Reduce recurrence of common incidents by driving tangible improvements (detections, playbooks, IAM hardening recommendations).

• Improve L1 escalation quality through coaching and better runbooks.

• Deliver measurable SOC enhancements (e.g., tuned rules reducing false positives, new detection coverage, automation that reduces triage time).

Working Style We Value

• Calm, structured response under pressure.

• High ownership and strong communication across technical and non-technical stakeholders.

• A continuous-improvement mindset: every incident becomes better detections, better controls, and better resilience.

As a member of the ShipBob Team, you will... 

• Grow with an Ownership Mindset: We champion continuous learning and innovation. You'll take on real problems, create tangible solutions, and drive results that move the needle for ShipBob, our merchants, and for your own professional growth. If you're ready to do the most meaningful work of your career, this is the place. 
• Collaborate with Peers and Leaders Alike: At ShipBob, leaders are accessible; feedback flows in both directions, and everyone, regardless of their seniority or role, steps up to help when needed. We hold each other to high standards because we trust each other to meet them. That combination of transparency and mutual respect is what makes the work here feel worth doing.
  Please mention the word **VERIFIABLE** and tag RMTM0LjQxLjE5Mi4yNA== when applying to show you read the job post completely (#RMTM0LjQxLjE5Mi4yNA==). This is a beta feature to avoid spam applicants. Companies can search these words to find applicants that read this and see they're human.

dv01 is lifting the curtain on the largest financial market in the world: structured finance. The $16+ trillion market is the backbone of everyday activities that empower financial freedom, from consolidating credit card debt and refinancing student loans, to buying a home and starting a small business.

dv01's data analytics platform brings unparalleled transparency into investment performance and risk for lenders and Wall Street investors in structured products. As a data-first company, we wrangle critical loan data and build modern analytical tools that enable strategic decision-making for responsible lending.  In a nutshell, we're helping prevent a repeat of the 2008 global financial crisis by offering the data and tools required to make smarter data-driven decisions resulting in a safer world for all of us. 

More than 400 of the largest financial institutions use dv01 for our coverage of over 75 million loans spanning mortgages, personal loans, auto, buy-now-pay-later programs, small business, and student loans. dv01 continues to expand coverage of new markets, adding loans monthly, and developing new technologies for the structured products universe.

YOU WILL:

• Bring transparency to the financial markets: You will bring transparency to consumer lending, mortgages, and other asset classes, by enabling our customers at banks, hedge funds, and credit originators via our SaaS offering including our Cashflows API product to quickly extract insights from large private and public datasets.
• Develop using a modern, open source
  
  Please mention the word **VIGILANCE** and tag RMTU3LjI0NS4yNDcuMTE4 when applying to show you read the job post completely (#RMTU3LjI0NS4yNDcuMTE4). This is a beta feature to avoid spam applicants. Companies can search these words to find applicants that read this and see they're human.