Analyst - Information Security

Key Responsibilities:

• Collaborate closely with IT and project teams to gain a comprehensive understanding of requirements related to network and cloud security, providing recommendations for appropriate solutions.
• Ensure effective coordination and proactive communication with all relevant teams involved in the requirements process.
• Assist the group in identifying redundant requirements and propose ideas for automation.
• Assess third-party technologies and hosting environments to verify that they sufficiently protect the processing, transmission, and storage of client information.

Technical Requirements:

• Proficient understanding of secure application architectures, encryption technologies, cryptography, key management, authentication, and access control mechanisms.
• Familiarity with common application layer vulnerabilities and the ability to convey associated risks to project teams.
• Knowledge of tiered application architectures, web applications, APIs, mobile application security, and data integration techniques.
• Strong comprehension of OWASP Top 10 vulnerabilities and the Application Security Verification Standard.
• Understanding of identity and access management principles and related technologies.

Additional Responsibilities:

• Familiarity with various cloud environments, cloud security stacks, and deployment models including SaaS, PaaS, and IaaS.
• Ability to assess the delivery of security solutions related to cloud security and recommend suitable controls based on the offerings.
• Practical experience with Amazon Web Services, Azure, or other cloud service providers.
• Insight into services and security solutions in cloud environments across diverse security domains such as Identity Access Management, Security Monitoring, and data protection.

Preferred Skills:

Technology->IDAM->Web Security