Analyst, Information Security

About the Role

The Analyst - Information Security will work closely with IT and project teams to understand requirements from a security standpoint, recommend relevant solutions, and evaluate third-party technologies and hosting environments.

Key Responsibilities

• Work closely with IT and project teams to understand requirements on both network and cloud fronts.
• Review requirements from a security standpoint and recommend relevant solutions.
• Coordinate and communicate promptly and proactively with relevant teams involved in requirements.
• Contribute to identifying redundant requirements and propose automation solutions.
• Evaluate outsourced/third-party technologies and hosting environments to ensure adequate protection for company/client information processing, transmission, and storage.
• Evaluate the delivery of security offerings related to cloud security and recommend appropriate controls.

Requirements & Tech Stack

• Working knowledge of secure application architectures, encryption technologies, cryptography and key management, authentication, and access control mechanisms.
• Knowledge of common application layer vulnerabilities and the ability to articulate risks to project teams.
• Knowledge of tiered application architectures, web applications, APIs, mobile application security, and data integration techniques.
• Good understanding of OWASP Top 10 vulnerabilities and Application Security Verification Standard.
• Knowledge of identity and access management processes, principles, and related technologies.
• Knowledge of various cloud environments, cloud security stack, and cloud deployment models (SaaS, PaaS, and IaaS).
• Working experience on Amazon Web Services (AWS), Azure, or any other cloud service provider(s).
• Understanding of services and security solutions in cloud environments across various security domains like Identity & Access Management, Security Monitoring, and data protection.