Information Security Analyst

About the Position

We are seeking an Information Security Analyst to join our team in Bucharest. This role involves reviewing security events, conducting threat research, and analyzing security vulnerabilities.

Responsibilities

• Review security events in a Security Information and Event Management (SIEM) system to develop accurate remediation actions
• Independently follow procedures to contain, analyze, and eradicate malicious activity
• Conduct proactive threat research using real-world security data and systems automation
• Review, respond, and build alerts
• Supervise current and trending remediation efforts
• Serve as a technical specialist for analyzing and identifying security vulnerabilities in web applications, operating systems, and networks
• Report to stakeholders on the security status of the environment, including trend analysis and remediation efforts
• Frequently document and communicate security risks, collaborating with internal and external partners

Requirements

• A college degree or equivalent experience in cyber security
• Verbal and written communication skills
• Business savvy and an eye for detail with timely execution
• Ability to deal with high priority, time-sensitive issues
• Ability to multitask and switch between multiple high priority projects
• Organisation and multi-tasking skills
• Understanding of the current threat and vulnerability landscape
• Experience with database systems, web servers, application servers, firewalls, routers, load balancers, switches, etc.
• Understanding of Application Security and the OWASP top 10 principles
• Experience with enterprise endpoint detection tools
• Dependability: Meet commitments, work independently, accept accountability, be adaptable to change, set personal standards
• Ability to effectively report trends and regular reporting
• Understanding of industry standard methodologies in application & operations security
• Knowledge of emerging threats, mitigations, and industry trends
• Solid grasp of Windows and Linux operating systems

Nice to Have

• Demonstrated ability in testing proof of concept exploits to identify potential vulnerabilities
• Proficient in scripting (any): Python, Ruby, Perl, PowerShell
• Certifications (any): CEH, GCIH, Security+, CCNA Cyber Ops, GWAPT, GPEN, OSCP, OSWE
• Solid grasp of public cloud infrastructure and architecture (AWS, Azure, GCP) and associated security concepts and challenges

We Offer

• Contract duration: 1 year, with possibility of extension
• Employment type: Only CIM contract
• Work setup: Hybrid, 1-2 days per week in the office

About the Company

[Company description if present]