CYBERSECURITY ANALYST

Who we are?

Humanize is an innovative and data-conscious company transforming the cybersecurity landscape across various industries. With our cyber-AI technology, we empower decision-makers to get a comprehensive view of their company’s cyber condition and be one step ahead of adversaries that target them to compromise.

Job description:

We are seeking a highly skilled and experienced Cybersecurity Analyst to join our innovative cybersecurity startup. As a Cybersecurity Analyst, you will be responsible for performing security testing of applications, networks, and infrastructures, conducting vulnerability assessments, penetration testing, and manual security testing techniques. You will also be involved in incident response, benchmarking top security tools, researching future threats and attack vectors, and providing recommendations for remediation.

Job responsibilities:

• Conduct penetration testing and vulnerability assessments of complex applications, operating systems, wired and wireless networks, and mobile applications/devices.
• Develop and maintain security testing plans, and automate penetration and other security testing on networks, systems, and applications.
• Create meaningful metrics to reflect the true posture of the environment, allowing the organization to make informed decisions based on risk.
• Produce actionable, threat-based reports on security testing results, and act as a source of direction, training, and guidance for less experienced staff.
• Mentor and coach other IT or security staff to provide guidance and expertise in their growth.
• Consult with application developers, systems administrators, and management to demonstrate security testing results, explain the threats presented by the results, and provide recommendations for remediation.
• Plan and create penetration methods, scripts, and tests, and simulate security breaches to test system security.
• Create reports and recommendations from findings, including the security issues uncovered and the level of risk.
• Advise on methods to fix or lower security risks to systems, and present findings, risks, and conclusions to management and other relevant parties.
• Consider the impact of identified flaws on the business and its users, and understand how they could affect business functions if not fixed.
• Manage network forensics and incident response when assigned, and perform special security projects on an ad hoc basis.

Required qualifications:

• Previous hands-on experience in penetration testing and vulnerability assessments.
• Bachelor's degree in Computer Information Systems, Management Information Systems, Cybersecurity, Computer Science, Information Technology, or a related field (a plus).
• In-depth knowledge of application development processes and at least one programming or scripting language (e.g., Java, Scala, C#, Ruby, Perl, Python, PowerShell).
• Hands-on experience with testing frameworks such as PTES and OWASP.
• Applicable knowledge of Windows client/server, Unix/Linux systems, Mac OS X, VMware/Xen, and cloud technologies such as AWS, Azure, or Google Cloud.
• Proficiency in scripting languages, ability to identify and exploit vulnerabilities, and knowledge of technical systems and terminology.
• Critical thinking, problem-solving, and analytical skills, with good written and verbal communication skills in English.
• Excellent organizational and time management skills.
• Nice to Have:
• Professional certification such as OSCP, OSCE, GIAC CPEN, CREST CRT, CEH, or equivalent.
• Knowledge of information security standards such as ISO27001, PCI DSS, GDPR, NIST, SOX.
• Experience with systems development, systems administration, and/or network administration.
• Previous experience in Responsible Disclosure & Bug Bounties.

Additional information:

• Competitive salary and performance bonuses
• Health insurance
• Paid day-offs
• Professional development training & certifications
• Teambuilding and corporate events
• Stock options
• Being a member of the technology creators’ team
• Being a part of a fast-growing cybersecurity startup

Required candidate level:

Middle

How to apply:

Interested and qualified candidates are welcome to send their CVs to the email address [email protected] mentioning "Cybersecurity Analyst" in the subject line.

 

Please kindly note that only shortlisted candidates will be contacted for the interview.

 

Learn more about Humanize