Cyber Security Analyst, Italy

ION; Milano; In loco; EUR 40.000 - 60.000; Tempo pieno

Descrizione del lavoro

An established industry player is seeking a dedicated IT/Cyber Security Analyst to enhance its security strategy. In this pivotal role, you will identify and mitigate information security risks, ensuring robust protection of IT systems and networks. Collaborating with the Group-wide CSIRT Team, you will conduct vulnerability assessments, respond to security incidents, and maintain compliance with security policies. This position is ideal for a technically proficient individual eager to advance their career in a dynamic security team, contributing to the safety and integrity of vital information assets. Join a diverse team of innovators and make a significant impact in a global organization.

Competenze

• 3+ years of experience in IT Security and/or IT roles.
• Must have fundamental programming/scripting capabilities.

Mansioni

• Identify, analyze, and mitigate threats to IT systems and networks.
• Respond to security alerts and conduct assessments of threats.

Conoscenze

IT Security

Programming/Scripting (Python, PowerShell, Bash)

Operating Systems (Windows/Linux)

Endpoint Security

Network Security

Vulnerability Management

Cryptography

Forensic Investigation

Formazione

Degree in Technology-related Field

Relevant Certifications (PenTest+, Security+, etc.)

Strumenti

SIEM

DLP

Intrusion Detection/Prevention Systems

Firewall Technologies

Descrizione del lavoro

The IT/Cyber Security Analyst is a global role within the ION Markets Division. The role will support the division’s security strategy through the identification, mitigation, and remediation of information security risks to the business. This role reports to the divisional CISO.

As a member of the Markets’ IT Security Team, the successful candidate will be responsible for handling escalations from the Group-wide CSIRT Team, improving the security posture, vulnerability management/reporting through to remediation, ensuring security standards are upheld as well as providing input into security control configuration and policies. The Security Analyst’s other responsibilities include meeting KPI targets defined by management and performing various other duties assigned by the divisional CISO.

We are looking for a hard-working, dedicated, and motivated individual. Excellent communication skills are a must, and the role holder will be expected to cultivate working relationships with other teams and colleagues of varying technical ability. The role would suit a technically strong candidate looking to drive forward career progression within a dedicated security team. Ideally, the candidate will have come from related security and systems administration roles, focusing on workstation, server, and network technologies.

Your role

Key Responsibilities

1. Protect and defend: identify, analyze, and mitigate threats to IT systems and/or networks.
2. Use defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or might occur within the network to protect information, information systems, and networks from threats.
3. Respond to security alerts to mitigate immediate and potential threats. Use mitigation, preparedness, and response and recovery approaches, as needed, to maintain information security and minimize impacts.
4. Conduct assessments of threats and vulnerabilities; determine deviations from acceptable configurations, enterprise or local policy; assess the level of risk; and develop and/or recommend appropriate mitigation countermeasures.
5. Operate and maintain: configure, tune, maintain and operate key security controls, technologies, and other risk mitigations.
6. Execute ongoing, operational business-as-usual (BAU) tasks to meet management-defined KPIs and SLAs, and deliver security projects in line with management-defined priorities and deadlines.
7. Stay current with the latest security news, threats, intelligence, tactics, techniques, and vulnerabilities. Research and analyze new threats and vulnerabilities to determine exposure.
8. Perform threat hunting and review, triage, investigate, and escalate security alerts raised by the Group-Wide SOC team, security tools, technologies, and services (e.g. endpoint security, network security, DLP, SIEM, etc.).
9. Assist and/or lead efforts to isolate, contain, respond to, and recover from security incidents.
10. Identify, review, prioritize, plan, coordinate, and follow-up on the remediation of vulnerabilities.
11. Configure, customize, tune, manage, troubleshoot, and maintain to ensure effective and efficient operation of security technologies, such as SIEM & endpoint security, intrusion detection/prevention systems, etc. This may also include scripting, automation, and orchestration across various platforms.
12. Define, document, and follow approved processes for all the responsibilities included in this job description. Create and maintain documentation for systems, including design and operation.
13. Review systems, configurations, and processes to ensure and report on compliance with ION policy, client requirements, audit controls, regulations, and industry best practices. Provide best practice security recommendations to IT and other teams within ION, based on review results.
14. Respond to information security-related inquiries and requests.

Required Skills, Qualifications, and Experience

1. Degree/certifications in a technology-related field and/or relevant working experience; highly desired certifications include: PenTest+, Security+, OSCP, CCSP, CEH, GCIH, GMON.
2. 3+ years' experience in IT Security and/or IT.
3. Must have fundamental programming/scripting capabilities (e.g. python, powershell, bash, etc.).
4. Must have in-depth understanding of operating systems (Windows/Linux).

The following general characteristics are required:

1. A team player with the ability to work independently and unsupervised.
2. Ability to own delegated tasks and see them through to completion.
3. Ability to manage time and prioritize work to maximize productivity.
4. Excellent communication skills (both written and verbal).
5. Exceptional attention to detail and quality.
6. Excellent problem-solving techniques and trouble analysis skills.

The candidate should have a good knowledge of:

1. Endpoint security concepts, controls, and best practices for Servers (e.g. Windows and Linux).
2. General IT networking concepts, protocols, standards, and network security concepts, controls, and best practices.
3. Cryptography fundamentals and data security controls and best practices.
4. Forensic investigation techniques.
5. Prior experience deploying, configuring, managing, and/or operating security technologies is preferred, such as endpoint security (e.g. AV/EPP/EDR), SIEM, DLP, SWG, CASB, UEBA, IDS, IPS, firewalls, IAM/PIM/PAM, vulnerability management, MDM, etc.

About Us:

We’re a diverse group of visionary innovators who provide trading and workflow automation software, data, and business insights to corporations, central banks, financial institutions, and governments. We are a truly global company; we employ 13,000+ people at 60+ offices and serve 4,800+ customers worldwide.

Important notes:

According to the Italian Law ( L.68/99 ) please note that candidates from the disability list will be given priority.

Due to the high volume of applications, only those candidates that meet the required criteria for selection will be contacted.

Please do not apply if you don’t currently have the legal right to work in Italy, or if that right is just about to expire, or if that right has restrictions imposed which would prevent you from undertaking a full-time employment contract.

€40,000 - €60,000 a year