Category: Security Analyst
As a Vulnerability Management Analyst at the company, you will be responsible for identifying, prioritizing, and remediating vulnerabilities in our organization’s infrastructure, applications, and systems.
You will work closely with other members of the security team, as well as stakeholders in other departments, to ensure the security of our technology assets.
Key Responsibilities:
- Conduct vulnerability assessments and penetration testing to identify vulnerabilities in our infrastructure, applications, and systems
- our infrastructure, applications, and systems. Analyze vulnerability scan results and work with other security team members to prioritize and assign remediation tasks
- Collaborate with application and infrastructure teams to track and ensure timely remediation of identified vulnerabilities
- Assist with the implementation of security controls to mitigate vulnerabilities and reduce risk to the organization
- Develop and maintain documentation related to vulnerability management processes, procedures, and reports
- Stay up-to-date with the latest trends and best practices in vulnerability management and provide recommendations for improvements to our security posture
Required Skills and Qualifications:
- 3+ years of experience in vulnerability management, penetration testing, or related field
- Knowledge of common vulnerabilities, exploits, and attack methodologies
- Strong analytical and problem-solving skills
- Experience with vulnerability management tools such as Tenable, Qualys, or Rapid7
- Excellent written and verbal communication skills
- Ability to work independently and collaboratively in a team environment
- Relevant certifications such as CEH, OSCP, or CISSP are a plus
- Knowledge of vulnerability NIST, CVSS scoring, CWE, MITRE, OWASP, CIS Benchmarks
- PLUS, if you have some development experience and/or working knowledge of code
Why join us:
- Ability to work remotely from anywhere in the world
- Close cooperation with the development team and client
- Opportunity to influence product development
- We cover English classes (with a native speaker)
- Boost professional brand: you can participate in local conferences as a listener or as a speaker
- Regular team buildings: have fun with teammates
- Gifts for significant life events (marriage, childbirth)
- Tech and non-tech Zazmic Communities: support and share experience with each other
Apply
We are looking for an experienced Data Security Analyst to join our growing security team at the project. The Data Security Analyst will be responsible for ensuring the privacy and security of all data across project group brands and teams.
This includes working with product management and engineering to ensure data privacy by design best practices are implemented, evangelizing our data classification standard, and working with cloud teams to ensure data security best practices are followed.
Key Responsibilities:
- Collaborate with other security teams, such as application security and network security, to ensure a comprehensive security posture across all areas of the business
- Participate in incident response activities and assist with investigations related to data security incidents.
- Work with product management and engineering teams to ensure that data privacy by design best practices are implemented across all company products.
- Evangelize the project data classification standard across all teams and ensure that data is classified according to its sensitivity level.
- Work with cloud teams to ensure that data is properly secured in cloud environments and that there are no data leakages or misconfigurations.
- Implement and maintain role-based access controls (RBAC) for sensitive and confidential data.
- Conduct data security risk assessments and recommend appropriate measures to prevent or mitigate risks.
- Participate in incident response activities related to data security incidents, including data breaches and data loss events.
- Ensure compliance with relevant data privacy and security regulations and standards, such as GDPR, CCPA, and ISO 27001.
- Keep up-to-date with relevant data privacy regulations and ensure project`s compliance with these regulations.
Required Skills and Qualifications:
- 3+ years of experience in data security or related field
- Knowledge of data privacy and security regulations and standards, such as GDPR, CCPA, and ISO 27001
- Familiarity with data classification and handling best practices
- Experience with cloud security, including AWS or Azure
- Strong understanding of network protocols and architecture
- Familiarity with security frameworks, such as NIST or ISO.
- Excellent written and verbal communication skills
- Ability to work independently and as part of a team in a fast-paced and dynamic environment
- Relevant certifications, such as CISSP, GIAC, or Security+
Why join us:
- Ability to work remotely from anywhere in the world
- Close cooperation with the development team and client
- Opportunity to influence product development
- We cover English classes (with a native speaker)
- Boost professional brand: you can participate in local conferences as a listener or as a speaker
- Regular team buildings: have fun with teammates
- Gifts for significant life events (marriage, childbirth)
- Tech and non-tech Zazmic Communities: support and share experience with each other
