Work somewhere with the creativity of a scaleup and expertise of an enterprise.
We are seeking an experienced Security Analyst who will be responsible for planning, designing, and carrying out penetration tests to identify vulnerabilities in our software, implementing OWASP best practices and thorough knowledge of attack frameworks such as MITRE ATT&CK. The Security Analyst will also help design IAM policies (identity lifecycle, authentication standards) for the company.
This profile will report to the Security Manager.
Responsibilities
- Planning and designing penetration tests to identify vulnerabilities in our software.
- Carrying out penetration tests using a variety of tools and techniques.
- Conducting threat analysis to understand potential attack vectors and prioritize security measures.
- Creating detailed reports on test results and offering recommendations to security decision-makers.
- Developing scripts to automate parts of the testing process and improve efficiency.
- Managing individual user accounts and possessing expertise in Identity and Access Management (IAM).
- Researching IT security trends to stay ahead of emerging threats.
- Implementing security training and awareness programs for employees to enhance overall security posture.
- Conducting internal security tests such as social engineering, phishing, and password analysis to identify weaknesses.
Requirements
What you have
- Bachelor's degree in Computer Science, Information Security, or related field.
- Proven experience in conducting penetration tests and vulnerability assessments.
- Strong understanding of networking protocols, operating systems, and security principles.
- Strong understanding of IAM principles and authentication standards.
- Proficiency in scripting languages such as Python, Perl, or PowerShell.
- Knowledge of major cloud architectures (AWS, Azure, GCP) and cloud security best practices
- Experience with penetration testing tools such as Metasploit, Nmap, and Burp Suite.
- Familiarity with threat analysis methodologies and attack frameworks such as MITRE ATT&CK.
- Knowledge of OWASP best practices for securing web applications and APIs.
- Excellent analytical and problem-solving skills.
- Strong communication and report-writing abilities.
Nice to have
- Relevant certifications such as OSCP, CEH, or GIAC are a plus.
Benefits
Perks
- Learning Friday. If our team members know more, so do we. That’s why we give everyone a training budget that they can spend on books, online courses or other training materials.
- Smart Working. Trains can be a drag, you can save some commuting time by working from home.
- Salary is based on experience, and topped up with other bonuses.
About iGenius
Established in 2016 by Uljan Sharka, iGenius is an AI company on a mission to humanize and democratize business data with Crystal, our proprietary GPT for numbers platform.
Crystal takes a human-first approach that enables business users to have high value conversations with data, all in an easy to use intuitive platform.
By combining data science, machine learning and conversational AI, Crystal becomes a private AI brain for business data, providing organizations with instant, safe and relevant data insights leading to faster and better decision making and business growth.
iGenius announced the partnership with Cineca to create the first Italian Foundational Large Language Model to help companies and Public Administration leverage the benefits of Generative Artificial Intelligence.
With this collaboration, iGenius and Cineca are committed to shaping the future of Artificial Intelligence, giving Italy a leading perspective in the field of highly advanced technology.”
With a strong global presence, iGenius operates in 4 countries with offices in New York and Milan, the company headquarters.
The team counts +100 talented international professionals, highly skilled in AI, machine learning, data science, and software engineering.
Please review our Privacy Policy here https://bit.ly/2XAy1gj .
