Information Security Analyst

Pico; Kraków; On-site; PLN 30,000 - 50,000; Full time

Job summary

Pico is seeking an Information Security Engineer to lead security assessments under the Chief Information Security Officer. This role involves designing, implementing, and managing security controls and conducting incident responses, ensuring compliance with industry standards.

The ideal candidate will have at least 5 years of experience in Information Security and possess a Bachelor's degree. The position offers a hybrid work environment with some flexibility for remote work.

Qualifications

• At least 5 years overall Information Technology experience within the Information Security area.
• Experience in securing Linux systems preferred.
• Proficiency in risk and vulnerability assessments.

Responsibilities

• Drive periodic security assessments and enforce security policies.
• Design and implement security controls and incident responses.
• Engage in technical design based on use cases and requirements.
• Recommend system enhancements to improve security posture.

Skills

Interpersonal skills

Problem solving

Written communication

Verbal communication

Detail-oriented

Customer-focused

Flexibility

Self-motivation

Education

Bachelor's degree or equivalent experience

Tools

Firewall technologies

Intrusion Detection Systems (IDS)

TCP/IP networking

Linux

Scripting languages

Fortinet

Firepower IDS

Job description

Pico fuels the global capital markets community by providing exceptional market data services and customized managed infrastructure solutions. As financial industry experts at the center of markets and technology, we help our clients efficiently scale their business and quickly access markets. From infrastructure to connectivity, we support our clients through the full trading lifecycle. We are a global company headquartered in New York, with offices in Chicago, London, Singapore, Hong Kong and Tokyo.

General Position Description

The Information Security Engineer, under the guidance of the Chief Information Security Officer, will drive periodic security assessments, security policy enforcement, design and implementation and operation of security controls and systems, and incident response. The essential functions of the position include, but are not limited to the following duties consistent with the Information Security Engineer position.

Essential Job Functions

• Be part of team that design, protects and manages, security services for companies’ global security infrastructure.
• Engineer and tune the cloud security solutions including but not limited to enrollments, monitoring, alerting and maintaining defined security posture.
• Implementation, development and integration of security solutions like IDS, Identity and Access Management systems, Firewalls and other related security controls and technologies.
• Engage in technical design of solutions based on use cases and business requirements.
• Participate in proof of concepts and other technical evaluations of technologies, designs and solutions and provide recommendations.
• Stay abreast of emerging technologies and threats proactively assess and evaluate the adoption thereof into the organization.
• Reduce time-to-detect and time-to-remediate by driving the automation of applied threat intelligence and sensor enrichment.
• Recommend appropriate system enhancements to improve the overall security posture.
• Assist in the development and review of security standards and practices.
• Maintain expertise to function as the subject matter expert in all security-related areas.
• Review and analyze configurations, architecture and implementations to verify compliance with security standards and practices.
• Ensure systems and solutions are as per prescribed policies and are aligned with appropriate industry compliance standards.
• Research and resolve IT security compliance issues.
• Assist in the development of appropriate security metrics and key performance indicators.

Qualifications

Skills: Requires excellent interpersonal, problem solving, and written and verbal communication skills. Must be able to demonstrate flexibility, self-motivation and initiative. Requires the ability to work under pressure in a fast-paced environment and be able to multi-task effectively. Must be detail-oriented, customer-focused and able to work in a team environment. The candidate needs to understand the business reason for analysis and comfortably navigate through the technical details. Additional skills with applications and tools that directly pertain to the information security/vulnerability assessment and compliance arena are highly desirable.

Experience

At least 5 years overall Information Technology experience within the Information Security area.

Specific Technical Experience

• Firewall and Intrusion Detection technologies
• TCP/IP networking
• Experience in securing Linux
• Scripting languages and command line interfaces beneficial
• Risk and vulnerability assessments (network, host, application)
• Fortinet
• Firepower IDS

Education

Bachelor's degree or equivalent experience.

Certifications

(cloud security certifications), CCNA, CISSP desirable.

Working Arrangements

This is a Hybrid position with weekly time in the office with the flexibility of working from home. Though travel may be required from time to time, it is not expected to be regular or frequent. The role holder will be expected to work whatever hours are necessary for the performance of this role (recognizing that it involves multiple jurisdictions/geographies including but not limited to EMEA, USA and APAC).

Pico is an equal opportunity employer. Pico does not discriminate on the basis of a candidate's age, race, gender, color, religion, sexual orientation, physical or mental disability, or other non‑merit factors. All employment decisions at Pico are based on business needs, job requirements and qualifications. If you require any assistance or accommodations to be made for the recruitment process, please inform us when you submit your online application.