Analyst - Information Security

Key Responsibilities:

• Collaborate closely with IT and project teams to gain a comprehensive understanding of network and cloud requirements from a security perspective, recommending appropriate solutions.
• Ensure effective coordination and timely proactive communication with all relevant teams involved in the requirements process.
• Assist the group in identifying redundant requirements and propose ideas for automation.
• Assess third-party technologies and hosting environments to confirm they offer sufficient protection for the processing, transmission, and storage of client information.

Technical Requirements:

• Proficient knowledge of secure application architectures, encryption technologies, cryptography, key management, and authentication and access control mechanisms.
• Familiarity with common application layer vulnerabilities and the capability to communicate associated risks to project teams.
• Understanding of tiered application architectures, web applications, APIs, mobile application security, and data integration techniques.
• Solid grasp of OWASP Top 10 vulnerabilities and the Application Security Verification Standard.
• Knowledge of identity and access management principles and related technologies.

Additional Responsibilities:

• Familiarity with various cloud environments, cloud security stacks, and deployment models including SaaS, PaaS, and IaaS.
• Ability to assess the delivery of security offerings related to cloud security and recommend suitable controls based on the offering.
• Hands-on experience with Amazon Web Services, Azure, or other cloud service providers.
• Comprehension of services and security solutions in cloud environments across multiple security domains, including Identity Access Management, Security Monitoring, and data protection.

Preferred Skills:

Technology->IDAM->Web Security