Information Security Analyst

Pico; Madrid; Híbrido; EUR 90.000 - 120.000; Jornada completa

Descripción de la vacante

Pico seeks an Information Security Engineer to drive security assessments, policy enforcement, and design of security controls. You will lead incident response, enforce standards, and evolve security architecture across the global infrastructure.

The role requires 7+ years in IT security, experience with Fortinet and Firepower IDS, and working knowledge of governance models (NIST, COBIT, GIAC, SANS). Hybrid work with some travel is available.

Formación

• 7+ years of IT experience in information security.
• Experience with firewall/IDS and securing Linux.
• Ability to perform risk and vulnerability assessments.
• Knowledge of governance models (NIST, COBIT, GIAC, SANS).
• Hybrid role with time in office weekly; some travel possible.

Responsabilidades

• Design, protect and manage security services for global infrastructure.
• Engineer cloud security solutions: enrollment, monitoring, posture maintenance.
• Implement and integrate security controls (IAM, Firewalls, IDS).
• Evaluate technologies and provide recommendations.
• Develop security metrics and KPIs; stay ahead of threats.

Conocimientos

Communication skills

Problem solving

Multitasking

Detail oriented

Team player

Customer focus

Educación

Bachelor's degree or equivalent

Cloud security certifications

Herramientas

Fortinet

Firepower IDS

Descripción del empleo

Pico fuels the global capital markets community by providing exceptional market data services and customized managed infrastructure solutions. As financial industry experts at the center of markets and technology, we help our clients efficiently scale their business and quickly access markets. From infrastructure to connectivity, we support our clients through the full trading lifecycle. We are a global company headquartered in New York, with offices in Chicago, London, Singapore, Hong Kong and Tokyo.

General Position Description:

The Information Security Engineer, under the guidance of the ChiefInformation Security Officer, will drive periodic security assessments,security policy enforcement, design and implementation and operation ofsecurity controls and systems, and incident response. The essential functionsof the position include, but are not limited to the following dutiesconsistent with the Information Security Engineer position.

Essential Job Functions:

• Be part of team that design, protects and manages, security services for companies’ global security infrastructure.
• Engineer and tune the cloud security solutions including but not limited to enrollments, monitoring, alerting and maintaining defined security posture.
• Implementation, development and integration of security solutions like IDS, Identity and Access Management systems, Firewalls and other related security controls and technologies.
• Engage in technical design of solutions based on use cases and business requirements
• Participate in proof of concepts and other technical evaluations of technologies, designs and solutions and provide recommendations
• Stay abreast of emerging technologies and threats proactively assess and evaluate the adoption thereof into the organization
• Reduce time-to-detect and time-to-remediate by driving the automation of applied threat intelligence and sensor enrichment
• Recommend appropriate system enhancements to improve the overall
  security posture.
• Assist in the development and review of security standards and practices
• Maintain expertise to function as the subject matter expert in allsecurity-related areas.
• Review and analyze configurations, architecture and implementationsto verify compliance with security standards and practices.
• Ensure systems and solutions are as per prescribed policies and are aligned withappropriate industry compliance standards.
• Research and resolve IT security compliance issues.
• Assist in the development of appropriate security metrics and key
  performance indicators.

Qualifications

Skills:Requires excellent interpersonal, problem solving, and written and verbal
communication skills. Must be able to demonstrate flexibility,self-motivation and initiative. Requires the ability to work under pressurein a fast-paced environment and be able to multi-task effectively. Must be detail-oriented, customer-focused and able to work in a team environment.The candidate needs to understand the business reason for analysis andcomfortably navigate through the technical details. Additional skills withapplications and tools that directly pertain to the informationsecurity/vulnerability assessment and compliance arena are highly desirable.

Experience:
Minimum of 7+ years overall Information Technology experience within the Information Security area.

Specific technical experience includes:

• Firewall and Intrusion Detection technologies
• TCP/IP networking
• Experience in securing Linux
• Scripting languages and command lineinterfaces beneficial
• Risk and vulnerability assessments (network, host, application),
• Fortinet
• Firepower IDS

Must be able to effectively evaluate technical security controls in place on information systems and make managementrecommendations. Strong understanding of information security engineeringprocesses, architecture methodologies, industry best practices and
governance models (SANS, GIAC, COBIT, NIST etc) and generally acceptedsecurity principles.

Education:

Bachelor's degree or equivalent experience.

Certifications:

(cloud security certifications), CCNA, CISSP desirable

Experience with SOC, ISO and other attestation and certification reviews a plus.

Working Arrangements

This is aHybridposition withweekly time in the office with the flexibility of working from home. Though travel may berequiredfrom time to time, it is not expected to be regular or frequent. The role holder will be expected to work whatever hours are necessary for the performance of this role (recognizing that it involves multiplejurisdictions/geographiesincluding but not limited to EMEA, USA and APAC).

IMPORTANT DATA PRIVACY INFORMATION:

This position is available with PICO GLOBAL LTD. The controller of your personal data will be PICO GLOBAL LTD.

Given the nature of the job, the position and the nature of the employer and the services it provides, we are entitled to possibly check the candidates' criminal record, as required by law and other regulations applicable to us.

For further information on what personal data we collect, how we will process your personal data and your rights with respect to your personal data please read our Pico Job Candidate Privacy Notice, View Here .

Be a part of Pico Family

Pico is an equal opportunity employer. Pico does not discriminate on the basis of a candidate's age, race, gender, color, religion, sexual orientation, physical or mental disability, or other non-merit factors. All employment decisions at Pico are based on business needs, job requirements and qualifications. If you require any assistance or accommodations to be made for the recruitment process, please inform us when you submit your online application.