About us

Looking for your next challenge? Allfunds (AMS: ALLFG) is a fast-paced, dynamic, Wealthtech leader with 17* offices around the globe and our employees are the best at what they do. We have a relentless passion for quality and a drive to keep ahead of the competition. We also have a strong business foundation built by experts over 20 + years ago, with the flexibility and agility of start-up. As a Wealthtech, Allfunds blends our wealth management expertise with the innovation and creativity of a fintech. We have over €1.7 trillion assets under administration and are the leading B2B platforms for the fund industry. We built and continue to evolve a digital ecosystem that covers the entire fund distribution value chain and investment cycle, with solutions including dealing and execution, data analytics, regulatory solutions, ESG tools, blockchain, and alternative investments. Founded in Madrid in 2000, Allfunds offers international opportunities, a commitment to work-life balance, competitive benefits packages including flexible holidays, and continued training and development. This is under-pinned by our values to have a positive social impact on the markets in which operate. If you are open to new prospects, an adaptable professional, and enjoy collaborating with diverse and inclusive people, then Allfunds is the place for you.

*Brazil, Chile, Colombia, France, Hong Kong, Italy, Luxembourg, Miami, Poland, Shanghái, Singapore, Spain (Madrid/Valencia), Sweden, Switzerland, United Arab Emirates and United Kingdom.

Our purpose

Our purpose is to transform the WealthTech industry. Allfunds. is achieving this through a deep commitment to quality and outstanding human capital, by providing the best service for our clients, and by creating value for all our stakeholders. For our employees.

We believe that our people’s talent is what creates our world-class service. Allfunds' employees are high performers and team players who live our core values. We encourage them to grow professionally and personally, and to stretch themselves to achieve their goals.

What you will find when working at Allfunds

We believe in:

• All for Excellence All of our experience and expertise, along with the passion we put in everything we do. So, our clients, employees, and partners can count on us for the best services.

• All for Accountability We always looking to make a difference through our transparent and responsible attitude towards people and society.

• All for Empowerment We work to continuously enhance our tools and services to make them accessible to our clients.

• All for Inspiration People are our driving force and helping them to reach their goals is our biggest motivator. That is why we aim to adapt to their needs and wants, accompany them on their journey, and inspire them to reach their dreams.

If you believe you match these values, we look forward to meeting you.

Diversity, Equity and Inclusion

For Allfunds, Human Capital is at the heart of the company’s strategy and results, as well as part of our ESG strategy. DEI, represents the acronym of Diversity, Equity and Inclusion and how we understand it within our group. For Diversity Allfunds includes ways in which people differ, encompassing the different characteristics that make one individual different from another. For Equity Allfunds encompasses the policies and practices used to ensure fair treatment, opportunity, and advancement for all employees. For Inclusion Allfunds creates a working environment in which any individual can be and feel welcomed, respected, supported, and valued.

Through DEI, Allfunds fosters a culture that recognizes and minimizes bias.

Sounds interesting? Please take a closer look...

The purpose of the Security Incident Response Analyst (CERT) role is to internally drive cybersecurity incident response, complementing the 24x7 SOC capabilities and ensuring that relevant incidents are managed effectively from a technical, organizational, and governance perspective.

The role acts as a bridge between the SOC, internal teams, and the business, ensuring continuity in incident management, clear communication, and consistency in documentation and evidence collection.

Key Responsibilities

• Act as the internal point of reference within the SOC monitoring and security incident response process.

• Receive and manage 24x7 SOC escalations when there is organizational impact, high uncertainty, or a need for internal decision-making.

• Actively participate in the end-to-end management of security incidents, from declaration through to closure.

• Assess the technical and organizational impact of incidents, providing context, judgment, and recommendations to support decision-making.

• Coordinate response activities with relevant internal stakeholders (IT, Infrastructure, Networks, Legal, HR, Compliance, and others) to ensure a coherent and aligned response.

• Ensure proper incident documentation, including analysis, decisions, actions taken, and conclusions, guaranteeing traceability within designated corporate systems.

• Collaborate with the SOC in the validation of containment and initial response actions within approved playbooks.

• Work with threat intelligence information, supporting:

  • Incident contextualization
  • Risk assessment
  • Event and indicator enrichment

• Participate in the definition, monitoring, and validation of KPIs related to the SOC service and incident detection, response, and management processes.

• Contribute to the creation, maintenance, and continuous improvement of cybersecurity documentation, including:

  • Standards
  • Procedures
  • Operational guides
  • Security controls

• Support the collection and preparation of evidence for internal and external audits related to cybersecurity and incident management.

• Participate in post-incident activities, including:

  • Lessons learned reviews
  • Corrective and preventive actions
  • Continuous improvement of processes and controls

• Facilitate clear, structured, and effective communication throughout incident management, adapting messages to different audiences and stakeholders.

Professional Experience

• Minimum of 3-5 years of experience in cybersecurity, with exposure to SOC environments and incident management.

• Proven participation in real security incidents, with responsibility for analysis, coordination, or decision-making.

• Experience working with both technical and non-technical teams during incident response situations.

• Experience in complex, regulated, or highly availability-dependent corporate environments.

Required Technical Knowledge

• Solid understanding of SOC processes, including:

  • Alert reception and triage
  • Event and incident classification
  • Incident escalation and management

• Hands-on experience in security incident response, including:

  • Intermediate to advanced technical analysis
  • Impact assessment

• Understanding of cybersecurity incident handling frameworks, methodologies, and best practices.