Security analyst (maternity leave)

Descripción del cargo

About the role
As a Security Analyst, you will be responsible for monitoring and responding to security events, supporting security governance initiatives, following up Identity Access management (IAM), and supporting PCI DSS compliance and evidence documents across our platforms. You will collaborate with both technical and business teams across diverse business teams to maintain a strong security posture and play a key role in the ongoing protection of infrastructure, applications, and sensitive data.
What you will do
• Monitor, analyze, and respond to security alerts and events from IDS/IPS, SIEM, endpoint protection, and security alerts
• Investigate suspicious activity, correlate logs, and assist in the escalation and containment of potential security incidents, if necessary.
• Maintain and validate the security-related asset inventory, especially across payment infrastructure.
• Support access control and user account lifecycle processes across internal and third-party systems as well as profiles management.
• Provide input for the improvement of security monitoring rules, incident handling processes, and documentation.
• Contribute to PCI DSS-related tasks and assessments by collecting evidence, validating controls, and supporting audit processes under BAU requirements
• Monitor Third Party vendors that interact in the PCI DSS ecosystem on our environment
• Overview of Policies, Standards, procedures over different security domains
What you need to succeed
• Bachelor’s or Technologist degree in Computer, Telecommunications, Electronics, Information Technology, or a related field.
• At least 3 years of hands-on experience in Information Security, as a security analyst or similar.
• Experience with security tools such as SIEM (e.g., Splunk, QRadar, etc.), IDS/IPS, and endpoint protection platforms (EDR).
• Working knowledge of vulnerability scanning tools and basic remediation tracking.
• Basic Experience with access management principles and identity governance like users, roles, profiles, permissions, etc.
• Understanding of cyber incident response processes and security best practices.
• Security Awareness of compliance requirements such as PCI DSS, with some prior exposure to audits or control implementation.
• Basic English proficiency (reading alerts, writing documentation, and communicating with international teams).
• Desired but not mandatory:
o Security graduate degree in Security (could be compensated with experience)
o Cloud technologies experience (e.g. AWS, Azure, GCP, etc.)
o Industry certifications (e.g., CompTIA Security+, ISO 27001 or others)