Position: Information Security Analyst
Company: A-HR
Experience required: 3y
English level: intermediate

Our client is a global software engineering firm. With over 20 years of experience, teams of highly-trained engineers around the world, deep industry sector knowledge, and ongoing technology research, we help clients create custom software that improves their operations and opens new markets. Started out as a company of friends and has a special culture that distinguishes it from other IT outsourcers, such as:

- Flat structure. There are no “bosses” and “subordinates.”

- We hire people not to a project, but to the company. If the project (or your work in it) is over, you go to another project or to a paid “Idle.”

- Flexible schedule, ability to change projects, to work from home, to try yourself in different roles.

- Minimal bureaucracy and micromanagement, convenient corporate services.

Responsibilities:
Collaborate closely with vendors, product teams, procurement, and other teams to gather the required information for performing assessments
Сonduct Information Security Assessments on vendors, new products, and architecture by reviewing security questionnaires
Provide guidance to teams about vendor and application security
Interact directly with vendors and product teams to get them to address security gaps
Organize and supervise penetration testing activities as part of information security assessments
Identify and evaluate technology risks internally and/or at third parties, identify controls that mitigate risks, and look for opportunities for control improvements


Must have:
Bachelor’s or master’s degree in information security, computer science or other technical disciplines
Professional experience in IT, risk management, or information security
Knowledge of common information security controls, guidelines, and standards such as ISO 27000 series, SOC 2, CIS 20 Critical Security Controls, NIST
Experience in conducting information security risk assessments based on security policies, industry standards, guidelines and best practices
Strong technical knowledge and understanding of security concepts, principles and best practices in areas such as Web Applications, Cloud Security, Endpoint and Network Security, Identity and Access Management, Security Protocols, SSDLC, Penetration Testing, Vulnerability Management, etc.
Experience with cloud offerings such as AWS or Azure
Ability to lead meetings and communicate clearly, concisely and confidently
Strong verbal and written communication skills for explaining technical information to clients, vendors, senior management, and staff
Ability to manage multiple projects and deadlines simultaneously
Strong teamwork and collaboration skills
Proficiency in English (verbal and written)


Would be a plus:

Experience with Python and KQL (Kusto Query Language)
Experience with Microsoft and Fortinet security products
Pentest experience and InfoSec certifications are preferred
Stress-resistance, creativity

Location:
Almaty
Krakow
Lodz
Lublin
Montevideo
Nur-Sultan
Remote.BG
Remote.KZ
Remote.PL
Sofia
Tbilisi
Wroclaw
Yerevan