IT Security Analyst in GIGACLOUD

GigaCloud is a Ukrainian cloud provider, helping companies since 2016 to confidently migrate data and services online: with ease, clarity and sense of support every step of the way.  

We have implemented cloud projects for over 1,500 companies, including large enterprises and public agencies. Thanks to our cloud solutions, over 20 million people every day make payments, access online documents, work files etc. We also have the largest partner program on the Ukrainian cloud market, which allows us to cover the wide range of clients’ IT needs.  

GigaCloud — a cloud that’s yours. We have everyone in their right place and on the same team. If you like what we do and how we do it, join us. Let's build the cloud together!  

We are looking for an IT Security Analyst with hands-on experience working with IT infrastructure and understanding cybersecurity compliance requirements.

The primary objective of the role is to conduct technical audits of security systems, infrastructure and processes, verify compliance with standards requirements and help departments implement secure practices. 

Main responsibilities:

• Conducting technical audits of IT infrastructure (servers, network, cloud services, access systems);
• Checking compliance with standards and regulatory requirements: ISO 27001,PCI DSS, NIST, internal security policies;
• Analysis of system configurations (Windows/Linux, network devices, IAM);
• Verification of: logging and monitoring, access management, network segmentation, backup, vulnerability management;
• Assessing the security architecture of IT systems;
• Preparing technical audit reports and recommendations;
• Interacting with IT teams to address identified risks;
• Participating in the implementation of security processes.

Main requirements:

• 4+ years in IT administration;
• 1–2 years in cybersecurity;
• Experience working in a company with formal security compliance requirements.

Technical knowledge:

• Windows Server / Linux, VMware;
• Networking (TCP/IP, VLAN, VPN, firewall);
• Active Directory / IAM;
• Logging and SIEM;
• Cloud infrastructure (AWS / Azure / GCP would be a plus);
• Basic knowledge of DevOps / containers would be a plus.

Security knowledge:

• System hardening;
• Access management;
• Vulnerability management;
• Security monitoring;
• Network security.

Standards:

• ISO 27001;
• PCI DSS;
• NIST.

Would be a big plus:

• Experience in technical audits;
• Work in a SOC;
• Experience in pentests or vulnerability scanning;
• Certifications: CISSP, CISA, CEH, ISO 27001.