information security analyst

Freedom Finance MENAT

<div>
 <p>
  Freedom Yat&inodot;r&inodot;m Menkul De&gbreve;erler A.&Scedil;. is the prospective brokerage firm of Freedom Holding, a dynamic and rapidly growing financial services company operating in the banking, brokerage, and insurance sectors, now preparing to launch operations in T&uuml;rkiye.
 </p>
 <p>
  <br/>
 </p>
 <p>
  As part of our strategic expansion across the MENAT region, we are seeking an experienced and proactive team member for the positions of Information Security Analyst to join our &Idot;stanbul, T&uuml;rkiye office.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Responsibilities
  </strong>
 </p>
 <ul>
  <li>
   Monitor security events, logs (systems, networks, applications), and alerts from SIEM, IDS/IPS, EDR, and other sources.
  </li>
  <li>
   Analyze and filter false positives; classify and prioritize incidents.
  </li>
  <li>
   Conduct investigations of suspicious activities and identify security incidents.
  </li>
  <li>
   Perform regular vulnerability scans of internal and external systems and applications.
  </li>
  <li>
   Verify system configurations for compliance with security standards and best practices.
  </li>
  <li>
   Respond to security incidents.
  </li>
  <li>
   Participate in post-incident corrective actions, analyze root causes and consequences, and prepare detailed reports.
  </li>
  <li>
   Support the company&rsquo;s Disaster Recovery Plan (DRP).
  </li>
  <li>
   Analyze applicable legal and regulatory requirements and standards (e.g., ISO/IEC 27001, NIST, GDPR, PCI DSS, etc.) relevant to the company&rsquo;s operations and local jurisdictions.
  </li>
  <li>
   Prepare for external and internal audits and liaise with auditors and regulatory bodies.
  </li>
  <li>
   Track key security performance indicators such as incident response time, number of vulnerabilities, remediation timelines, and policy deviations.
  </li>
  <li>
   Prepare regular reports for management on the overall security posture, identified vulnerabilities, incident status, and compliance level.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Requirements
  </strong>
 </p>
 <ul>
  <li>
   Minimum 3 years experience as an Information Security Analyst.
  </li>
  <li>
   Advanced level of English
  </li>
  <li>
   Russian-speaking preferred
  </li>
  <li>
   Strong understanding of IT infrastructure architecture, including operating systems (Windows, Linux, macOS), networks, cloud services, and virtualization environments.
  </li>
  <li>
   Solid knowledge of network protocols, traffic, and logging &mdash; ability to analyze network and system logs, identify anomalies, and detect signs of compromise.
  </li>
  <li>
   Experience working with SIEM, IDS/IPS, EDR, antivirus software, and other security monitoring tools.
  </li>
  <li>
   Skills in digital forensics and investigation (Forensics).
  </li>
  <li>
   Knowledge of malware detection and analysis techniques.
  </li>
  <li>
   Proficiency in incident response processes.
  </li>
  <li>
   Experience in developing and maintaining incident response plans, playbooks, procedures, and response instructions.
  </li>
  <li>
   Ability to assess damage impact: conduct risk analysis, evaluate consequences, data leakage scope, and overall business impact.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Why Join Us?
  </strong>
 </p>
 <ul>
  <li>
   Become part of Freedom Holding, a rapidly growing, global, and dynamic organization in the banking, brokerage, and insurance sectors across the MENAT region and beyond.
  </li>
  <li>
   Take a leadership role where your strategies and decisions will directly shape the growth direction of the business in the region.
  </li>
  <li>
   Benefit from incentive plans and development opportunities tied to your performance and results.
  </li>
  <li>
   Engage directly with senior leaders and be recognized for your achievements, leadership skills, and results-driven approach.
  </li>
 </ul>
 <p>
 </p>
</div>


Information Security Analyst

Skyworks Solutions

<div><p>If you are looking for a challenging and exciting career in the world of technology, then look no further. Skyworks is an innovator of high performance analog semiconductors whose solutions are powering the wireless networking revolution. At Skyworks, you will find a fast-paced environment with a strong focus on global collaboration, minimal layers of management and the freedom to make meaningful contributions in a setting that encourages creativity and out-of-the-box thinking. We are excited about the opportunity to work with you and glad you want to be part of a team of talented individuals who together can change the way the world communicates.</p><p>
Requisition ID: 75956</p><div><div><div><h2 class="jobSectionHeader"><b>
Description</b></h2></div><div><p>
The Principal Information Security Analyst will be a key member of Skyworks&rsquo; Information Security team. This person will work closely with cross functional teams to ensure appropriate physical, administrative and technical controls are operating effectively to ensure the confidentiality, integrity and available of Skyworks&rsquo; information resources. This role will be instrumental in supporting the strategy and execution of the Information Security program in partnership with senior management. In addition to technical acumen, the role requires an individual who is results-oriented, pragmatic, and consistently demonstrates effective problem-solving and communication skills. The Principal Information Security Analyst may act as the subject matter expert for colleagues in all aspects of information security. The successful candidate will be responsible for overseeing our privacy program, performing risk assessments, and driving compliance initiatives.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Responsibilities</b></h2></div><div><p><b>
Privacy Program Management</b></p><ul><li>
Oversee and maintain the organization&rsquo;s privacy program, ensuring compliance with applicable data protection laws and regulations</li><li>
Create, update, and maintain the privacy data map that is required for different privacy regulations (GDPR, CPRA, PIPL, DPDP).</li><li>
Perform privacy impact and/or security assessments as needed for different projects and systems.</li><li>
Educate users on privacy by design requirements when deploying new systems.</li></ul><p></p><p><b><br>
Governance, Risk and Compliance</b></p><ul><li>
Contribute to the continuous improvement of the Information Security risk management program, compliance initiatives, and overall security risk posture.</li><li>
Develop, maintain, and enforce Skyworks Information Security Policies, Standards, Guidelines, and other Information Security related documents.</li><li>
Assist with risk assessments to identify potential threats and vulnerabilities across the organization, analyzing their impact and likelihood of occurrence, and developing appropriate mitigations strategies.</li><li>
Collaborate with cross functional teams to collect evidence for customer audits and policy frameworks such as ISO27001, CMMC, TISAX, GDPR, CCPA</li><li>
Maintain the security risk register and track the progress of remediation efforts.</li><li>
Updated our monthly metrics and dashboards that measure and showcase the maturity progression of Skyworks Information Security program.</li><li>
Provide cybersecurity expertise/consulting to teams and management</li><li>
Performs other security related duties and assignments, as needed, to support the program.</li></ul><p></p><p><b><br>
Third-Party Risk Management</b></p><ul><li>
Maintain an up-to-date inventory of third-party vendors and their associated risk profiles</li><li>
Assess and monitor new and existing third-party vendors to ensure they meet security and compliance requirements.</li><li>
Issue corrective/improvement action requests and track vendor&rsquo;s progress through closure.</li><li>
Utilize security ratings services to continuously evaluate the security posture of third-party vendors.</li></ul><p></p><p><b><br>
Security Awareness &amp; Training</b></p><ul><li>
Manage the information security awareness programs which include security awareness training, phishing campaigns, security newsletters and publications</li><li>
Promote a culture of security awareness throughout the organization.</li></ul><p>
Identify creative security campaigns for Cybersecurity Awareness Month in October.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Required Experience and Skills</b></h2></div><div><ul><li>
Minimum Education Level: Bachelor&rsquo; s Degree, Information Systems Management, Computer Science, Cybersecurity, or related field.</li><li>
5+ years of full-time work experience in IT audit, security risk management, information security, security compliance, privacy, or other GRC areas.</li><li>
Experience in security assessments, developing and implementing security controls, and driving security compliance programs.</li><li>
Working knowledge of industry standards (ISO 27001, NIST, SANS) and Privacy (GDPR, CCPA, PIPL) requirements.</li><li>
Good communication skills, strong work ethic, attention to detail, and ability to collaborate in a team setting.</li><li>
Strong critical thinking, analytical, and problem-solving skills are a MUST</li><li>
Proficient with the Microsoft office suite.</li></ul><p></p><p><br>
To be successful in this position, the candidate will be expected to 1) treat people with respect; 2) meet their commitments; 3) earn the trust and respect of their colleagues; 4) work ethically and with integrity; and 5) accept responsibility for their own actions.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Desired Experience and Skills</b></h2></div></div></div><div></div><p>
Skyworks is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law.</p></div>

Principal Information Security Analyst

<div>:
<div><b>
What you will do:</b></div><ul><li>
Respond to security incidents as part of the Incident Response Team.</li><li>
Research attempted or successful efforts to compromise systems security, determines causes of security violations, and designs countermeasures.</li><li>
Analyse network access requests and make recommendations to management around risks posed by proposed changes</li><li>
Utilize analytical and investigative processes to perform threat hunting activities across the organization.</li><li>
Analyse existing SIEM correlation rules and make tuning recommendations.</li><li>
Contribute to align to security best practice, mitigate known risks and align with business compliance objectives</li><li>
Assist other security operational teams with daily tasks such as account management/role assignments, access reviews, patch management operations, audit/testing remediation.</li><li>
Create and update documentation and train peers.</li></ul><div><b>
Requirement:</b></div><ul><li>
You&rsquo;re curious, passionate, authentic, and accountable. These are our values and influence everything we do.</li><li>
Open-minded and self-motivated to proactively contribute to the SAS Information Security program.</li><li>
2-3 years of information security experience.</li><li>
Demonstrated experience of various IT platforms (i.e. networking, system admin, scripting etc.).</li><li>
Demonstrate experience with some of the following systems/methodologies or be interested in expanding domain expertise to include:</li><li>
Networking</li><li>
Enterprise ticketing systems (e.g. ServiceNow)</li><li>
Cloud technologies (e.g. Azure, AWS, O365, GCP)</li><li>
Scripting languages (Python, Shell, PowerShell)</li><li>
Log management/SIEMs (e.g. Azure Sentinel , Splunk)</li><li>
IDS/IPS</li><li>
Web content filtering</li><li>
DLP</li><li>
EDR</li><li>
EPM</li><li>
Active Directory/Azure AD</li><li>
Identity Management &amp; Governance
</li><li>Container Security</li><li>
Application Security (SCA, DAST, SAST)</li><li>
Threat &amp; Vulnerability Management</li><li>
Email Security</li><li>
Bug Bounty Program</li><li>
Public Key Infrastructure (PKI) and TLS Certificate</li><li>
Strong verbal and written communication and interpersonal skills as you will be interfacing with many internal customers.</li><li>
Ability to juggle multiple projects and priorities.</li><li>
Willing to work in shifts</li></ul></div>

Graebel Companies Inc.

<div><p>Are you ready to open a world of opportunity in talent mobility? Our clients include some of the largest and most recognized brands in the world. They&rsquo;re innovators and leaders in their industries, making life-enhancing breakthroughs every day. We help them tap into those opportunities by placing their exceptional people where they need to be, anywhere in the world. When it comes to service, we set the bar for exceptional &hellip; and then we raise it with fresh ideas, leading tools and innovative approaches, and it&rsquo;s all grounded in our values of truth, love, and integrity. We call it People-first Mobility. We&rsquo;re looking for exceptional people who share those values along with our passion for delivering the highest levels of service. If that sounds like you, and if you&rsquo;re ready for a new career opportunity, we&rsquo;d like to hear from you! Here&rsquo;s to the world ahead.</p>
<p>
The Senior Information Security Analyst is responsible for identifying, assessing, and mitigating information security risks across networks, systems, and applications. This role involves conducting vulnerability analysis, implementing remediation strategies, and ensuring environmental security hardening. Additionally, the analyst supports client and vendor security assessments, contributes to business development proposals, and assists with data privacy compliance. A strong understanding of security management practices and frameworks such as ISO, SOC, and HITRUST is essential.</p><br>
<p></p>
<p><b>
ESSENTIAL DUTIES AND RESPONSIBILITIES:</b></p>
<ul>
<li>Monitor event logs, triage security alerts, and track emerging threats and vulnerabilities from trusted sources.</li>
<li>Perform vulnerability scans, analyze findings, and manage remediation efforts, including penetration testing and configuration assessments.</li>
<li>Coordinate enterprise security awareness programs, including phishing simulation campaigns.</li>
<li>Reviews access controls and identity management processes to ensure least privilege and compliance.</li>
<li>Supports internal and external audits, ensuring adherence to frameworks and regulatory requirements.</li>
<li>Administers and optimizes security tools providing best practice solutions.</li>
<li>Generates security metrics, dashboards, and reports for leadership and stakeholders.</li>
<li>Manage and complete client and vendor security audit assessments.</li>
<li>Work in partnership with security engineering and IT teams to support technical projects and security initiatives.</li>
<li>Maintain working knowledge of industry security frameworks (ISO, SOC, HITRUST) and compliance regulations (SOX, GDPR, CCPA, etc.).</li></ul></div>

Sr Information Security Analyst

Abu Dhabi ports

<div><div><div><div><div><div>Key Responsibilities:
</div><div><p><b>Penetration Testing and Red Teaming:
</b></p><ul><li>Conduct comprehensive penetration testing and red teaming exercises on systems, networks, applications, mobile platforms, and AI/ML environments to identify vulnerabilities and potential entry points for attackers.
</li><li>Perform AI system and model penetration testing, focusing on adversarial attacks, prompt injection, data poisoning, and model inversion vulnerabilities.
</li><li>Assess AI pipelines, APIs, and LLM-based integrations for misuse, data leakage, and unauthorized access risks.
</li><li>Develop and execute custom tools and scripts to automate testing and exploitation processes.
</li><li>Analyze and report on findings, providing detailed explanations of vulnerabilities and recommended remediation steps.
</li><li>Simulate advanced persistent threats (APTs) to test the resilience of security controls and incident response capabilities.
</li><li>ASM: Continuously discover and catalog all assets, including hardware, software, and network components.
</li><li>ASM: Monitor the attack surface for changes and potential vulnerabilities, using automated tools and manual assessments.
</li></ul><p><b>Vulnerability Assessment:
 </b></p><ul><li>Perform thorough vulnerability assessments to identify and prioritize security weaknesses.
</li><li>Utilize industry-standard tools such as Qualys, Nessus or Nexpose and methodologies to uncover vulnerabilities in various environments.
</li><li>Provide actionable recommendations for remediation and mitigation strategies.
 </li></ul><p><b>Patch management
</b></p><ul><li>Support AI-specific vulnerability scanning and review of data pipelines or model endpoints.
</li></ul><p><b>Threat Modeling and Risk Assessment:
</b></p><ul><li>Develop and maintain a comprehensive understanding of systems, networks, applications, and AI models to identify potential exploitation paths.
</li><li>Conduct threat modeling and risk assessments to identify potential attack vectors and vulnerabilities
 </li><li>Develop and maintain a comprehensive understanding of our systems, networks, and applications to identify potential vulnerabilities
</li>Provide recommendations for remediation and mitigation strategies<br>
<li>
</li></ul><p></p><p><b>Incident Response and Crisis Management:
</b></p><ul><li>Participate in security incident response and crisis management efforts as needed
</li><li>Collaborate with incident response teams to contain and remediate security incidents
</li><li>Provide technical expertise and guidance during incident response efforts
</li></ul><p><b>Security Research and Development:
</b></p><ul><li>Research and develop adversarial testing techniques for AI models, including LLM prompt manipulation and training data leakage.
</li><li>Stay up to date with the latest security threats and trends, and adapt testing methodologies accordingly
</li><li>Develop and maintain a comprehensive knowledge of industry-leading security tools and technologies
</li><li>Participate in security research and development efforts to identify and develop new testing techniques and methodologies
</li></ul><p><b>Collaboration and Communication:
</b></p><ul><li>Collaborate with development teams to implement security patches and fixes
</li><li>Provide technical guidance and support to development teams on security-related issues
</li><li>Communicate complex technical information to non-technical stakeholders in a clear and concise manner</li></ul></div></div></div></div></div></div>
<br><p></p><div><div><div><div><div><div><ul>Responsibilities: Key Responsibilities:<br>
<br>
Penetration Testing and Red Teaming:<br>
<br>
Conduct comprehensive penetration testing and red teaming exercises on systems, networks, applications, mobile platforms, and AI/ML environments to identify vulnerabilities and potential entry points for attackers.<br>
Perform AI system and model penetration testing, focusing on adversarial attacks, prompt injection, data poisoning, and model inversion vulnerabilities.<br>
Assess AI pipelines, APIs, and LLM-based integrations for misuse, data leakage, and unauthorized access risks.<br>
Develop and execute custom tools and scripts to automate testing and exploitation processes.<br>
Analyze and report on findings, providing detailed explanations of vulnerabilities and recommended remediation steps.<br>
Simulate advanced persistent threats (APTs) to test the resilience of security controls and incident response capabilities.<br>
ASM: Continuously discover and catalog all assets, including hardware, software, and network components.<br>
ASM: Monitor the attack surface for changes and potential vulnerabilities, using automated tools and manual assessments.<br>
<br>
Vulnerability Assessment:<br>
<br>
 Perform thorough vulnerability assessments to identify and prioritize security weaknesses.<br>
Utilize industry-standard tools such as Qualys, Nessus or Nexpose and methodologies to uncover vulnerabilities in various environments.<br>
Provide actionable recommendations for remediation and mitigation strategies.<br>
<br>
 Patch management<br>
<br>
Support AI-specific vulnerability scanning and review of data pipelines or model endpoints.<br>
<br>
Threat Modeling and Risk Assessment:<br>
<br>
Develop and maintain a comprehensive understanding of systems, networks, applications, and AI models to identify potential exploitation paths.<br>
Conduct threat modeling and risk assessments to identify potential attack vectors and vulnerabilities<br>
 Develop and maintain a comprehensive understanding of our systems, networks, and applications to identify potential vulnerabilities<br>
Provide recommendations for remediation and mitigation strategies<br>
<br>
Incident Response and Crisis Management:<br>
<br>
Participate in security incident response and crisis management efforts as needed<br>
Collaborate with incident response teams to contain and remediate security incidents<br>
Provide technical expertise and guidance during incident response efforts<br>
<br>
Security Research and Development:<br>
<br>
Research and develop adversarial testing techniques for AI models, including LLM prompt manipulation and training data leakage.<br>
Stay up to date with the latest security threats and trends, and adapt testing methodologies accordingly<br>
Develop and maintain a comprehensive knowledge of industry-leading security tools and technologies<br>
Participate in security research and development efforts to identify and develop new testing techniques and methodologies<br>
<br>
Collaboration and Communication:<br>
<br>
Collaborate with development teams to implement security patches and fixes<br>
Provide technical guidance and support to development teams on security-related issues<br>
<li>
Communicate complex technical information to non-technical stakeholders in a clear and concise manner</li></ul></div></div></div></div></div></div>
<br><p></p><div><ul>Qualifications: A bachelor&rsquo;s degree in computer Science, or a related field is required.<br>
OSCP, CEH, CRTP or other relevant certifications<br>
Minimum of 5+ years of experience in penetration testing, vulnerability assessment, or a related field<br>
Strong understanding of networking protocols, operating systems, and applications<br>
Proficiency in programming languages such as Python, C++, or Java<br>
Experience with penetration testing frameworks and tools such as Nmap, Nessus, Burp Suite, or Metasploit<br>
Strong analytical and problem-solving skills<br>
Excellent communication and reporting skills<br>
Ability to work independently and as part of a team<br>
Strong attention to detail and ability to maintain accurate records<br>
Ability to work in a fast-paced environment with tight deadlines<br>
<br>
Additional Requirements:<br>
<br>
Experience with AI Penetration Testing and LLM Red Teaming.<br>
Knowledge of adversarial ML, AI governance, and AI model assurance frameworks (e.g., NIST AI RMF, ISO/IEC 23894).<br>
Experience with cloud-based technologies and cloud security<br>
Familiarity with Agile development methodologies<br>
Strong understanding of compliance and regulatory requirements (e.g., GDPR, PCI-DSS)<br>
Experience with security orchestration, automation, and response (SOAR) tools<br>
<li>
Familiarity with threat intelligence and threat hunting</li></ul></div>

Dynatrace

<div><h2 class="jobSectionHeader"><b>Your role at Dynatrace</b></h2>
<p>
We're looking for a <b>Lead Information Security Analyst with deep expertise in Salesforce (SFDC) security</b> to help safeguard our enterprise systems and support secure digital transformation.</p><p>
Dynatrace exists to make the world&rsquo;s software work perfectly. Our unified software intelligence platform combines broad and deep observability and continuous runtime application security with the most advanced AIOps to provide answers and intelligent automation from data at an enormous scale. This enables innovators to modernize and automate cloud operations, deliver software faster and more securely, and ensure flawless digital experiences. That is why the world&rsquo;s largest organizations trust Dynatrace&reg; to accelerate digital transformation.
</p><div>We're an equal opportunity employer and embrace all applicants. Dynatrace wants YOU&mdash;your diverse background, talents, values, ideas, and expertise. These qualities are what make our global team stronger and more seasoned. We're fueled by the diversity of our talented employees.
<br>
<br>
<ul><li>Represent the Corporate Security team in the selection and implementation of large ERP type packages. Most specifically SFDC but others as well.</li><li>Train and coordinate with systems application owners, data custodians, technical leads, and business impact analysts on security standards, guidelines, and vendor risk management of the systems within the organization and sub organizations.</li><li>Build relationships with Dynatrace Business Systems application teams.</li><li>Create, conduct, and report on security audits and assessments for all systems applications (custom, SaaS and 3rd Party applications).</li><li>Provide guidance and support over the teams and ensure they can meet risk management requirements and industry control frameworks for their systems/applications.</li><li>Contribute to the development and implementation of security policies, procedures, and controls.</li><li>Serve as a bridge between the Dynatrace business units and the Security Risk Management organization to promote and facilitate the adaptation and involvement with the Dynatrace Risk Management Framework</li></ul></div><h2 class="jobSectionHeader"><b>
What will help you succeed</b></h2>
<p><b>
Minimum Requirements:</b></p><ul><li>
Bachelors Degree or relevant experience
</li></ul><p><b>Preferred Requirements:
</b></p><p><b>Technical skills:</b></p><ul><li><p>
Experience with Salesforce (SFDC) implementations and integrations.</p></li><li><p>
Experience performing secure application configurations of other large ERP type Software packages.</p></li><li><p>
Knowledge of configuration and integration security (API, etc.) for SaaS solutions</p></li><li><p>
Understanding Secure Architecture Design (Zero Trust, Threat Modeling)</p></li><li><p>
Understanding of Application Security (OWASP Top 10)</p></li><li><p>
Experience in programming languages and technologies used in web development</p></li><li><p>
Proficiency with AGILE techniques, preferably tools: Atlassian/Jira</p></li><li><p>
Proficiency in using security assessment tools and techniques</p></li><li><p>
Understanding of legal and regulatory obligations related to information security.</p></li><li><p>
Experience working with Governance, Risk and Compliance (GRC) tools (preferred: OneTrust)</p></li></ul><p>
</p><p><b>Risk Management Skills:</b></p><div><ul><li><br>
Identifying potential security vulnerabilities, risks and their potential impact to the organization</li><li>Risk analysis and mitigation of potential vulnerabilities
</li><li>Applying risk management frameworks and methodologies</li><li>Performing data classification</li><li>Conducting security risk reviews</li><li>Control framework implementation, such as NIST 800-53, ISO 27001, Fed Ramp and NIST CSF</li><li>Knowledge of penetration tests on web applications and tools.</li><li>Maintaining systems/applications records status for reporting and alerts</li><li>Providing advice and guidance in implementing IT security policies and procedures to reduce risk.</li><li>Stay current with emerging threats, vulnerabilities, and security technologies.</li></ul></div><p>
</p><p><b>The estimated salary range for this role is $ 133,000 - $166,000.
</b></p><p>Due to timezone differences within a highly global team<b> , we will give preference to candidates located in the East Coast time zone.
</b></p><h2 class="jobSectionHeader"><b>Why you will love being a Dynatracer</b></h2>
<ul><li>A one-product software company creating real value for the largest enterprises and millions of end customers globally, striving for a world where software works perfectly.</li><li>
Working with the latest technologies and at the forefront of innovation in tech on scale; but also, in other areas like marketing, design, or research.</li><li>
A team that thinks outside the box, welcomes unconventional ideas, and pushes boundaries.
</li><li>An environment that fosters innovation, enables creative collaboration, and allows you to grow.</li><li>
A globally unique and tailor-made career development program recognizing your potential, promoting your strengths, and supporting you in achieving your career goals.
</li><li>A truly international mindset with Dynatracers from different countries &amp; cultures all over the world, and English as the corporate language that connects us all</li><li>
A culture that is being shaped by the diverse personalities, expertise, and backgrounds of our global team.</li></ul></div>

Lead Information Security Analyst

Univest Financial Corporation

<div>Overview:
<div></div><div>
Univest Financial Corporation (UVSP), has approximately $7.9 billion in assets and $5.4 billion in assets under management and supervision (as of June, 2025). Headquartered in Souderton, Pa. and founded in 1876, the Corporation and its subsidiaries provide a full-range of financial solutions for individuals, businesses, municipalities and nonprofit organizations in the Mid-Atlantic Region. For nearly 150 years, Univest has stayed true to our philanthropic spirit and the strength of our Committed to Local giving program is one of the things that differentiates us. In 2024, Univest donated $2.1 million to our local nonprofits and our employees volunteered more than 16,000 hours.</div><p></p><p><br>
We are seeking a <b>Senior Information Security Analyst</b> to join our Souderton based Information Security Team.</p>
Responsibilities:
<div>
Ensure and continuously improve the confidentiality, integrity, and availability of corporate and customer data in alignment with the company&rsquo;s information security program.</div><div></div><div><br>
Perform real-time monitoring, detection, and analysis of security events from multiple data sources on a daily basis.</div><div></div><div><br>
Identify anomalous network traffic, monitor login activity, search for indicators of compromise, and respond appropriately to detected events.</div><div></div><div><br>
Actively monitor and evaluate emerging threat intelligence from internal and external sources, recommending and implementing preventive and detective measures.</div><div></div><div><br>
Participate in all phases of the incident response process, including identification, containment, eradication, recovery, and reporting.</div><div></div><div><br>
Support information security risk assessments and reviews for new or prospective cloud and SaaS technology acquisitions.</div><div></div><div><br>
Prepare and present evidence for internal and external audits, and assist with remediation of identified gaps.</div><div></div><div><br>
Collaborate with IT to remediate vulnerabilities and strengthen overall security posture.</div><div></div><div><br>
Maintain and grow professional knowledge by attending training sessions, webinars, conferences, and earning continuing professional education credits.</div><div></div><div><br>
Comply with all laws and regulations that apply to the position, including the Univest Code of Conduct</div><div></div><div><br>
Perform additional duties as required</div>
Qualifications:
<div>
10+ years of progressive, hands-on experience in information security support roles.</div><div></div><div><br>
5+ years of direct experience securing and monitoring cloud and SaaS providers, ideally within a financial services environment.</div><div></div><div><br>
Proven ability to configure, monitor, and manage security controls for Azure, M365, and AWS environments.</div><div></div><div><br>
Skilled in the use of diverse network and endpoint security monitoring, alerting, and investigative tools across multiple platforms.</div><div></div><div><br>
Advanced understanding of internet routing and application protocols, with strong emphasis on TCP/IP.</div><div></div><div><br>
Effective written and verbal communication skills with the ability to explain complex technical and security concepts to non-technical audiences.</div><div></div><div><br>
Excellent analytical, investigative, and problem-solving skills.</div><div></div><div><br>
Demonstrated ability to work independently, collaborate across teams, and serve as a technical subject-matter expert to help guide security initiatives.</div><div></div><div><br>
Highly self-motivated, with a track record of taking on increasing levels of responsibility.</div><div></div><div><br>
Bachelor&rsquo;s degree in an information technology&ndash;related field preferred; relevant industry certifications (CISSP, Azure Security Engineer Associate, AWS Certified Security) a plus.</div><p></p><p><b><br>
Wage Range:
</b></p><p>The salary for this position ranges from $100,000 - 130,000
</p><p><b>Benefits Overview:</b></p><p>
Univest offer's a comprehensive benefits package that includes:</p><ul><li><b>
Health Insurance: </b>Medical, dental and vision coverage (single or family; begins the first of the month following start date)</li><li><b>
Retirement Plan:</b> Participation in 401(k) plan with up to a 3% employer match after 6 months of employment</li><li><b>
Paid Time Off (PTO):</b> 20 days annually (prorated your first year)</li><li><b>
Short Term Disability:</b> 10 days annually of sick time with a doctors note (prorated your first year)</li><li><b>
Holiday Time Off:</b> 11 paid holidays</li><li><b>
We offer company paid life insurance: </b>as well as other supplemental insurances</li><li><b>
Tuition reimbursement
</b></li><li><b>Employee Wellness programs: </b>including fitness club discounts and fitness tracker discounts/ annual reimbursement</li><li><b>
Discounts:</b> on loan products</li><li><b>
Professional development trainings</b></li></ul><div>
Click here for Benefit Information</div><div></div><div><br>
#Univest</div><div>
#LI-Hybrid</div><div>
#INDUF</div><div></div><div><i><br>
An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</i></div></div>

Senior Information Security Analyst – Cloud/SaaS

Search 10000+ Information security analyst jobs near you this December. New roles added regularly across leading industries. Apply today.

10000 information security analyst jobs NEAR_ME

Information Security Analyst

Principal Information Security Analyst

Information Security Analyst

Sr Information Security Analyst

Information Security Analyst

Lead Information Security Analyst

Senior Information Security Analyst – Cloud/SaaS