Information Security Analyst

ThoughtBot · Ispra, Lombardia, Italia ·


Descrizione dell'offerta

Your tasks

  • Security assessments of Information Systems and underlying infrastructure to verify correct implementation of security controls and identify potential vulnerabilities;
  • Involved with the following testing techniques: black/grey/white box testing;
  • Security audit of system architecture, and, compliance with security policies and industry best practices;
  • Participate to the update and planning of security assessment dashboard;
  • Analysis and reporting on identified issues and possible issues/improvements proposals.


Requirements

  • Master’s degree in IT or relevant discipline, combined with minimum 5 years of relevant working experience in IT;
  • Experience with Applications and Infrastructures Security assessments and penetration testing (White/Grey/Blackbox testing);
  • Experience in vulnerability monitoring;
  • Knowledge of Burp Suite® tool suite;
  • Knowledge of Secure System Architecture Design;
  • Experience with DevSecOps and CI/CD would be a strong advantage;
  • At least one of the following certificates would be considered a strong advantage: : Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), Offensive security certified expert (OSCE), Certified red team operator (CRTO) or equivalent;
  • Excellent command of the English language.

Candidatura e Ritorno (in fondo)