Position: Security Analyst
Company: Smart Hires
Experience required: 3y
English level: upper

Security Practice team consults clients on computer security matters, heavily focused around e-commerce systems. In addition to security-centered consulting projects, the team offers security monitoring and analysis to all of our managed services clients and development projects across multiple platforms in e-commerce, CMS and other web applications.

As a Security Analyst, you'll consult on security matters for both client and internal web-based projects and will work with many clients and project teams. Success in this role requires a person who can operate in the role of a Security Analyst based on our current standards and approach while helping us to grow this role.

**What you'll do**
● Perform regular security analysis of client web applications using a set of industry-standard testing and vulnerability management tools, including web
application specific and proprietary tools and configuration checklists to create security reports.
● Use industry-standard tools and your experience to rate issue severity to help in task prioritization.
● You will be part of all new development projects ensuring the highest security standards are met for all applications delivered to our clients.
● Be an expert for security questions across the company, including helping guide teams as they resolve any existing issues or consulting on development of new features with security ramifications.
● You will be part of or oversee first response and coordination of resources during security events and will work with development and project management staff to identify appropriate plans for vulnerability remediation
● Contribute to the analysis, execution, and maintenance of security procedures that thoroughly test our web products.
● Review developments in the field of security, in novel attacks and defensive technologies, with a focus on the technologies most commonly used at the company.
● Document common security vulnerabilities and remediation tactics to ensure uniform implementation across the entire organization.

**What you should bring to the table**
● Experience in the field of security testing, or understanding of information security and experience in learning new concepts.
● Experience in working with team members across multiple time zones both in real-time and with a time delay. Pick up and track multiple threads on different topics.
● Know how to explain complex technical information in an easy-to-understand language.
● An ambition to enhance and refine our security services.
● Help the growth of the practice by imagining additional services the Security Practice could offer or coming up with creative ways to provide existing services.