Security Analyst

Piano; United States; Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Multisport card

Lunch tickets

Paid Sick days (3 days per half-year)

2 extra vacation days/year

Possibility to work from home several 

Job summary

Piano ищет специалиста по безопасности для усиления своей команды. Вы будете сотрудничать с разработчиками и операциями, обеспечивая безопасное развёртывание приложений и сервисов.

Требуется опыт работы с инструментами безопасности, навыки автоматизации и готовность развиваться в гибридном формате с частичным удалённым рабочим временем. Конкурентное вознаграждение и обучение ждут кандидатов.

Qualifications

• Степень бакалавра в области информатики, информационной безопасности или смежной области.
• Опыт работы с инструментами безопасности: сканеры уязвимостей (Shodan, Nessus, DefectDojo), IDS/IPS и инструменты анализа кода (SonarQube).
• Сильные навыки автоматизации и скриптинга (Python, Bash, PowerShell).

Responsibilities

• Мониторинг систем безопасности, журналов и оповещений; реагирование на инциденты и угрозы.
• Управление уязвимостями и участие в тестировании на проникновение.
• Администрирование и поддержка инструментов безопасности (IDS/IPS, SIEM, фаерволы).
• Внедрение и улучшение мер безопасности в CI/CD, обучение сотрудников и разработчиков.

Skills

Scripting & Automation

Education

Bachelor's degree in computer science or information security

Tools

Shodan.io

Nessus

DefectDojo

IDS/IPS

SonarQube

Job description

Описание:

Piano's Digital Revenue Optimization solution helps digital services grow revenue by better understanding and influencing their customers' behavior. Piano unifies analytics, segmentation, and commercial personalization in one AI-driven application, enabling sites and apps to efficiently maximize the value of every user visit. Headquartered in Amsterdam with offices in the Americas, Europe, and Asia-Pacific, Piano serves a global client base including the BBC, Deutsche Telekom, Nikkei, AXA and the Wall Street Journal. As the Security Analyst, you will be part of the security team and collaborate with development and operations teams to ensure the seamless and secure delivery of applications and services. Security Analyst reports to Chief Information Security Officer and cooperates with Security engineer.

Задачи:

• Monitoring and Analysis:
  • Monitor security systems, logs, and alerts to detect and respond to fraudulent acitivities, security events, and security incidents in a timely manner.
  • Conduct analysis of security events and incidents to identify trends, threats, and vulnerabilities.
• Vulnerability Management:
  • Assist in vulnerability assessments and penetration testing activities.
  • Identify and prioritize security vulnerabilities and work with relevant teams to remediate them.
• Security Tools Management:
  • Assist in the administration and maintenance of security tools used by Piano such as intrusion detection/prevention systems, firewalls, endpoint protection, and security information and event management (SIEM) systems.
• Incident Response:
  • Participate in incident response activities, including investigation, containment, and resolution of security incidents.
  • Document incident response procedures and lessons learned for continuous improvement.
• Security Awareness:
  • Support security awareness initiatives by creating and delivering training materials, conducting security awareness campaigns, and promoting best practices among staff members.
• Compliance and Policy Adherence:
  • Assist in ensuring compliance with relevant regulations, standards, and policies (e.g., GDPR, HIPAA, ISO 27001, PCI DSS).
  • Contribute to the development and maintenance of security policies, procedures and guidelines.
• Security Projects:
  • Collaborate with cross-functional teams on security-related projects and initiatives, such as security infrastructure upgrades, risk assessments, and security audits.
• Support of Secure software development:
  • Maintain security controls throughout the software development lifecycle according to various secure coding practices (such as OWASP) to identify and mitigate security risks.
  • Integrate security tools and processes into the CI/CD pipeline to ensure automated security testing and validation.
  • Identify and recommend fixes for security issues in the codebase.
  • Work with other engineers to fix other vulnerabilities in the application layer.
• Continuous improvement:
  • Automate security processes to enhance efficiency and reduce manual intervention, including vulnerability scanning, configuration management, and incident response.

Требования:

• Bachelor's degree in computer science, Information Security, or related field.
• Experience with security tools such as vulnerability scanners (Shodan.io, Nessus, DefectDojo), IDS/IPS, and code analysis tools (SonarQube).
• Strong scripting and automation skills (e.g., Python, Bash, PowerShell)

Условия:

• Multisport card
• Lunch tickets
• Paid Sick days (3 days per half-year)
• 2 extra vacation days/year
• Possibility to work from home several days a week
• Ongoing career guidance and mentoring
• Introductory training and self-learning
• Refer-a-Friend – get a bonus in the employee referral program

Applicants must have authorization to work in this jurisdiction without sponsorship from Piano.