Position: Application Security Analyst
Company: CNA International IT
Category: Security
Experience required: 3y
English level: upper

We are looking for an experienced AppSec Analyst to join an international company that creates cutting-edge IoT solutions. The team creates innovative, battery-free tags that can track location, check the temperature, and detect the object’s movement. If you want to build unique products and work with big data, please apply.

**Requirements:**
-4+ of experience in IT Security (App security and Cloud);
-Strong private and public cloud security experience.
-Experience and knowledge in security architecture, identity and access management, application security, and network security;
-Cloud security;
-Experience with SAST/DAST solutions and methodology;
-Threat intelligence analyst experience. SIEM analyst experience;
-Incident forensics (Digital forensics and incident response (DFIR));
-Risk assessment & treatment experience;
-Upper-intermediate English level.

**Would be a plus:**
-Secure Access Service Edge (SASE) or Zero Trust knowledge;
-Container security;
-Familiarity with security & privacy frameworks, NIST CSF, 800-53, GDPR, CCPA;
-Experience with modern cloud applications and services; AWS, Azure, G Suite, Okta, FusionAuth, etc;
-CEH, CompTIA certification.

**Responsibilities:**
-Assist, and guide implementation of the ISMS activities;
-Monitoring the compliance of information security policies and procedures;
-Preventing data breaches and monitoring and reacting to attacks;
-Implementing a new developmental approach to the entire organization in preventing and alleviating threats/attacks;
-Report to Senior Management periodically on different ISMS activities;
-Responsible for secure software development SDLC, recognizing the security threats, and working with the Dev team on closing vulnerabilities and mitigating misconfigurations;
-Monitoring and auditing that company’s critical assets are secured and controlled;
-Incident Response – testing for and resolving system vulnerabilities, maintaining strong security best practices, and providing support for all incident handling measures;
-Install, configure, test, and maintain security systems, and other security tools.

**The company offers:**
-Health insurance
-21 vacation days;
-Equipment is provided;
-International working environment;
-Opportunities for professional and career growth.