Security Analyst

About Piano Piano's Digital Revenue Optimization solution helps digital services grow revenue by better understanding and influencing their customers' behavior. Piano unifies analytics, segmentation, and commercial personalization in one AI-driven application, enabling sites and apps to efficiently maximize the value of every user visit. Headquartered in Amsterdam with offices in the Americas, Europe, and Asia-Pacific, Piano serves a global client base including the BBC, Deutsche Telekom, Nikkei, AXA and the Wall Street Journal. Role Overview As the Security Analyst, you will be part of the security team and collaborate with development and operations teams to ensure the seamless and secure delivery of applications and services. Security Analyst reports to Chief Information Security Officer and cooperates with Security engineer. Responsibilities: - Monitoring and Analysis: Monitor security systems, logs, and alerts to detect and respond to fraudulent acitivities, security events, and security incidents in a timely manner. Conduct analysis of security events and incidents to identify trends, threats, and vulnerabilities. - Vulnerability Management: Assist in vulnerability assessments and penetration testing activities. Identify and prioritize security vulnerabilities and work with relevant teams to remediate them. - Security Tools Management: Assist in the administration and maintenance of security tools used by Piano such as intrusion detection/prevention systems, firewalls, endpoint protection, and security information and event management (SIEM) systems. - Incident Response: Participate in incident response activities, including investigation, containment, and resolution of security incidents. Document incident response procedures and lessons learned for continuous improvement. - Security Awareness: Support security awareness initiatives by creating and delivering training materials, conducting security awareness campaigns, and promoting best practices among staff members. - Compliance and Policy Adherence: Assist in ensuring compliance with relevant regulations, standards, and policies (e.g., GDPR, HIPAA, ISO 27001, PCI DSS). Contribute to the development and maintenance of security policies, procedures and guidelines. - Security Projects: Collaborate with cross-functional teams on security-related projects and initiatives, such as security infrastructure upgrades, risk assessments, and security audits. - Support of Secure software development: Maintain security controls throughout the software development lifecycle according to various secure coding practices (such as OWASP) to identify and mitigate security risks. Integrate security tools and processes into the CI/CD pipeline to ensure automated security testing and validation. Identify and recommend fixes for security issues in the codebase. Work with other engineers to fix other vulnerabilities in the application layer. - Continuous improvement: Automate security processes to enhance efficiency and reduce manual intervention, including vulnerability scanning, configuration management, and incident response. Requirements: - Bachelor's degree in computer science, Information Security, or related field. - Experience with security tools such as vulnerability scanners (Shodan.io, Nessus, DefectDojo), IDS/IPS, and code analysis tools (SonarQube). - Strong scripting and automation skills (e.g., Python, Bash, PowerShell) Perks at Piano: - Multisport card - Lunch tickets - Paid Sick days (3 days per half-year) - 2 extra vacation days/year - Possibility to work from home several days a week - Ongoing career guidance and mentoring - Introductory training and self-learning - Refer-a-Friend – get a bonus in the employee referral program Applicants must have authorization to work in this jurisdiction without sponsorship from Piano.