компания "altenar" altenar is a provider of sportsbook software and services to licensed gaming operators. ranging from ‘software-only’ product offers to the provision of a fully-managed sports betting platform stack, altenar offers proven stability coupled with a flexible and personalised service. our software is developed and operated in-house, whilst being powered by premium quality data feeds. the information security analyst shall work closely with the various altenar teams to ensure that both security and compliance are maintained at all times. this shall be done through operational analysis and liaison with the operators of the software development lifecycle (developers, devop practitioners, service management role owners, for example) as well as liaison with all other actors in altenar’s business. the role reports to the head of information security within the technology operations. the information security team is responsible for the design, maintenance and improvement of the overall security posture as well as ensuring technical compliance to relevant data protection and gaming regulatory legislation. the information security team also operates and continually improves the security systems and tools that assist in achieving the overall security posture. the activities of an information security analyst include but are not limited to: assisting in the design and implementation of the company information security framework maintaining the siem system and monitoring and analysis of security alerts to identify irregular activity and security violations performing and/or coordinating network and application penetration testing and vulnerability assessments across all assets ensuring systems are up to date with security patches in response to every changing threat landscapes. regular auditing of systems and processes to ensure adherence to policies deploying and operating tools to enhance information security such as the endpoint protection systems, host intrusion systems, and event detection and correlation systems. vetting of new hardware and software, and architectural design changes to identify potential risks assisting system administrators with the implementation and configuration of security policies performing security awareness training to educate employees on how to identify suspicious activity such as phishing attacks participating in incident response and business continuity exercises assisting with the ongoing maintenance of regulatory requirements experience/skills required experience in information technology system design, implementation and maintenance working with vulnerability assessment tools experience with security tools such as endpoint security, siem, kali linux and/or other security scanning os distributions functional technical knowledge and expertise in the domains of information systems networking, identity management, authentication/authorization systems and protocols, development/build/deployment workflows and application communication protocols with a focus on vulnerability areas and their mitigation. technical certifications in any of these areas would be highly desirable. appreciation of secure coding practices and knowledge of common coding vulnerabilities knowledge of encryption technologies proficiency in spoken and written english meticulous attention to detail and tenacious sense of ownership desirable skills holding certifications such as ethical hacking, cissp, cism, sans giac would be highly desirable in supplementing technical knowledge and expertise etc. familiarity with devops toolchain elements such as ansible, nuget artifact management, azure devops build pipelines knowledge of google cloud security models experience with container security (detection/mitigation) approaches and tools knowledge of gaming regulations such as mga and ukgc familiarity with the gdpr previous experience working in iso27001 certified environments graduate-level education in computer science, engineering or other relevant field experience working with remote or distributed teams benefits stable and flexible working environment training and professional development events health insurance gym compensation discretionary bonus in line with employee and annual company performance corporate parking near our office multinational team with experts around the world interesting work with smart colleagues
Адрес
Владимир