Position: Security analyst (app security)
Company: Matchit.me
Experience required: 3y
English level: upper

We are looking for a skilled Information Security Analyst to join our team. As an Information Security Analyst, you will play a crucial role in ensuring the security and integrity of our systems, applications, and services. Your responsibilities will include:

Responsibilities:

Develop comprehensive security requirements for services and applications.
Create thorough threat models for systems and services to identify potential vulnerabilities.
Participate in the assessment of information security risks for various systems and services.
Analyze vulnerabilities discovered during information security testing.
Collaborate in change management processes to ensure security considerations are addressed.
Prepare and analyze information security requirements for systems, products, and components.
Craft documentation related to information security, such as regulations, technical maps, and instructions.
Identify and evaluate threats and vulnerabilities using automated testing tools and manual tests.
Stay informed about information security regulations set by state regulators.
Implement and enforce information security controls for product solutions.
Apply knowledge of information security risk management methodologies.
Conduct risk assessments for internal and external systems, products, and services.
Develop expertise in protecting mobile applications and organizing related security methods.
Demonstrate proficiency in cryptography, including understanding global standards and state-specific differences.
Possess competence in the field of electronic signatures.
Shape information security requirements for cloud solutions, with a preference for AWS.
Build comprehensive threat models for information systems and their components.
Be knowledgeable about the OWASP Top 10 vulnerabilities in information systems.
Understand the architecture of web applications, web servers, application technologies, frameworks, and protocols in relation to development and deployment.
Familiarity with code management systems (e.g., BitBucket), CI/CD building systems (e.g., Jenkins), containerization principles, Kubernetes docker container management, microservice architecture, and authentication methods like OAuth 2.0 and OpenID Connect.
Demonstrate determination, the ability to work independently, negotiation skills, and a knack for reaching consensus in diverse product development teams and solutions.
Fluent English, preferably at an upper-intermediate level.
If you are a proactive and knowledgeable Information Security Analyst with a passion for creating secure and resilient systems, we encourage you to apply. Your expertise will contribute significantly to the ongoing protection of our organization's information assets.