Information Security Analyst (K/M)

Hi! This is Neontri - we are a company of over 120 people. We specialize in two areas: we create systems commissioned by our Clients (most often we create something from scratch, or add entirely new functionalities) mainly from the: financial, banking, fin-tech, e-commerce sectors - though not only :) we support our Clients in recruiting Specialists, and we strive to select the best matched offers for our Candidates (so-called bodyleasing)

What might set us apart from other companies and why is it worth starting a cooperation with us? We possess extensive experience in implementing large, complex projects. Millions of users use the applications we co-create every day. Most projects are conducted long-term and remotely. We care about our relationships and the possibility of regular integration meetings. We also try to get involved in charitable activities. In our daily cooperation, we emphasize honesty, trust, and good relationships. Projects are implemented in smaller teams with diverse seniority.

Project information: Currently, for our Client from Ireland in the engineering-service industry, we are looking for a person for the Information Security Analyst position, who will be responsible for analyzing, developing, and verifying the level of information security in the organization.

Project: Cooperation with internal IT teams, as well as an external SOC partner. Participation in the analysis and handling of security incidents, conducting audits, and implementing mechanisms to mitigate cyber threat risks. This is a role for a person who combines technical experience in IT infrastructure with practical knowledge regarding cybersecurity. Project duration: long-term (12m+) Stack Technologiczny: Microsoft Azure, Microsoft 365, Windows Servers Team: cooperation with several teams Work mode: 100% remote - part-time work (30-50 h/month) Remuneration: 160 - 200 PLN/h + VAT Cooperation model: outsourcing (contract with Neontri)

Daily tasks

• Analysis and handling of security incidents – from initial response until their closure.
• Cooperation with an external SOC partner and IT teams in analyzing and responding to potential threats.
• Designing, implementing, and maintaining a security audit program in accordance with standards such as ISO 27001, NIST, or OWASP.
• Implementation of proactive security activities, including penetration tests, Purple Team exercises, Disaster Recovery tests, and audits.
• Participation in creating and developing security policies, documentation, standards, and incident response processes.
• Administration and maintenance of tools and systems used in the Information Security area.
• Cooperation on initiatives related to Continuous Service Improvement and IT projects.

Requirements

Apply if you have:

Min. 3 years of experience in a role related to Information Security / Cybersecurity. Min. 5 years of experience in IT environment administration or maintenance. Practical experience working with IT infrastructure, particularly in areas such as servers, networks, Microsoft Azure, and Microsoft 365. Good knowledge of security standards and frameworks, such as ISO 27001, NIST, and OWASP. Experience in analyzing and handling security incidents. Ability to perform troubleshooting and conduct Root Cause Analysis. Knowledge of IT Service Management processes and ITIL v4. Very good command of English (daily cooperation with teams from Ireland; creating documentation and reports). Ability to organize work independently, prioritize tasks, and take responsibility for implemented actions.

Nice to have Experience in project management and knowledge of PRINCE2, PMBOK, or Agile. Certifications such as CompTIA Security+, CISA, ISACA CSX-P, or similar. Technical certifications related to Windows Server, Azure, Microsoft 365, or CCNA.

Must have: Information Security, Cybersecurity, Servers, Web, Microsoft Azure, Microsoft 365, Security framework, ISO 27001, NIST, OWASP, Troubleshooting, Root Cause Analysis, IT Service Management, ITIL v4

Nice to have: PRINCE2 certification, PMBOK. Project Management Body of Knowledge, Agile, CompTIA Security+, CISA, ISACA, CSX-P, Windows Server, Azure, CCNA