Position: Senior Cyber Security Data Analyst - Poland or relocation to Poland
Company: Luxoft
Category: Security
Experience required: 3y
English level: upper

Security Vulnerability Management provides the support infrastructure for IT systems from Cyber Security perspective.

Project Description:
Security Vulnerability Management provides the support infrastructure for IT systems from Cyber Security perspective. It is a part of Cyber Hygiene, a function that provides executive level analysis, reporting, compliance support and oversight for security vulnerability remediation activities across all platforms. It ensures compliance delivery as per policies, review and timely remediation of vulnerabilities/configurations of servers' Network IP, Operating System, Middleware, Database hosted on prem/ Cloud infra along with other IT assets.
We are building a team of Big Data Analysts with understanding of IT Infrastructure and preferably Cyber Security. Some team members will work more on the technical side, while others will combine Data Analysis with Business Analysis - it's up to you what you choose and where you feel better, over the time you can also perform BA activities.
Responsibilities:
Technical side
• Accountable for compliance of assets hosted in client's environment
• Must track and be able to report cradle to grave the full life cycle associated with vulnerability identification to remediation
• Handle massive data sets, analyze & report
• Identify deviations/discrepancy in security vulnerability data and liaise with multiple teams to fix them
• Drive compliance of patching, configurations of assets as per Cyber Hygiene guidelines
• Ensure all work activities adhere to the bank's policies and procedures
• Generate executive reports on projects/ compliance levels
• Drive end to end vulnerability scanning, detection, and remediation improvement projects
• Liaise with Automation, platform teams, patching teams to increase the infra footprint (cloud, MW, firmware) and further streamline the patching automation
• Identify improvement opportunities in existing process, initiate and drive the improvements as projects
• Escalation of issues/ potential problems to appropriate owners/ streams/ Stakeholders
• Track & Report KPI/SLA/OLA's for all Vulnerability management related Metrics

Business side
• Run Operational projects to streamline and enhance tools & processes as per deadlines
• Prepare status reports and present to stakeholders &, management
• Organize & chair meeting with relevant stakeholders to drive projects
Mandatory Skills Description:
Technical side
• Hands-on experience on handling, analyzing and generate reports out of massive size of data sets
• Knowledge on Analytic tools such as Excel, Tableau, Power BI, Alteryx etc.
• Knowledge on tools such as Nessus Vulnerability Scanner, Tanium, Panaseer, SNOW, RiskIQ
• Knowledge on CVE & solutions released by vendors such as Red Hat & Microsoft
• Well-versed with IT Security Vulnerability and Patch Management Methodology
• ITIL Foundation certification, proficient on Release, Change, Incident, Problem Management
• Experience on Process Improvements/Automations to bring in Operational Efficiency
• Strong learning capability, committed to self-development
• Able to adapt to changes and have flexibility in performing the support role
• Bachelor's degree in technology or equivalent higher education in IT
• Experience in IT support role within Banking & Financial services industry

Business side
• Great presentation skills
• Office 365, especially Excel and Power Point skills
• Able to communicate assertively and effectively across all levels (Stakeholders, Peers, Auditors, Leadership)
• Client-focused and ability to empathize with clients' needs and instill confidence that their issue will be dealt with efficiently and effectively
• Able to motivate and influence team, Operational Lead experience will be an advantage