Security Analyst in KUNA

Security Analyst за кордоном KUNA KUNA isaleading crypto banking platform encompassing KUNA Pay, KUNA.io , and KUNA Core. KUNA Pay KUNA Pay offers businesses acrypto banking solution. KUNA Pay opens the door toexploring new revenue channels orenhancing existing operations through straightforward cross-border transactions. European businesses benefit from KUNA Pay’s ability tocreate crypto bank accounts, enabling them toaccept crypto payments asaB2B provider and settle inEuros directly into bank accounts, bypassing direct crypto involvement. — kuna.io/en Launched byfintech innovator Michael Chobanyan in2015, KUNA.io marked Ukraine’s entry into the public cryptocurrency exchange arena. The platform facilitates the exchange offiat currency for cryptocurrencies and vice versa. Itnot only trades its own token, KUN, but also supports awide array ofmajor cryptocurrencies, allowing for trading through adedicated mobile app. KUNA.io iscurrently undergoing transformation and branching out into new European and EEA markets, driving improvements inuser interface and functionality tobetter accommodateEU users. Weare committed tooffering amore regulated suite ofinvestment products, including purchase, storage, sale, and transfer services under aVASP license inLithuania. KUNA Core KUNA Core isatool that allows businesses toimplement aready-made solution for simple and understandable interaction with Blockchain. KUNA Core project istoenable project partners tocarry out awide range ofthe crypto services. Role inthe project Weare seeking anexperienced ITSecurity Specialist tojoin our team. AsanITSecurity Analist, you will beresponsible for ensuring the security ofour organization’s computer systems and networks. You will work closely with theIT team toimplement and maintain security measures that protect our sensitive information and prevent unauthorized access. Duties and Responsibilities AsanInformation Security Analyst, you will play acrucial role insafeguarding our organisation’s assets from potential threats. You will beresponsible for raising awareness with colleagues, assessing risks, implementing controls, and ensuring compliance with industry standards and best practices. Key responsibilities include: Developing, maintaining and publishing ISMS documentation (processes, procedures and guidelines), ensuring overall governance and continual improvement ofinformation security controls. Conduct regular security audits toidentify vulnerabilities and recommend solutions Monitor network traffic for any suspicious activity orbreaches Investigate security incidents and provide incident response support Install, configure, and maintain security systems such asfirewalls and intrusion detection systems Perform vulnerability assessments and penetration testing Stay up-to-date with the latest security trends, threats, and technologies Collaborate with otherIT teams toensure security best practices are followed Provide training and guidance toemployees onsecurity awareness Maintaining conformance with ISO 27001, including adaptation ofthe ISMS tomeet evolved structure and requirements ofISO 27002:2022, and other applicable standards.Helping expand the scope ofISO 27001 certification toinclude other international entities ofthe firm, especially with local processes, risks, controls, internal and external audits and management review Evaluate, select, implement and maintain security tools, infrastructure, and automation. Advise teams ondeveloping pragmatic solutions that achieve business requirements tomaintain acceptable levels ofrisk. Automate tasks and processes related tosecurity monitoring toincrease efficiency. Conduct thorough investigations ofsecurity incidents and provide detailed reports and recommendations. Participate inthe company’s incident response team and assist with emergency procedures asneeded. Requirements Trained asanauditor inISO management systems, ideally ISO 27001 but relevant others also considered. Strong knowledge ofcertifications and standards such asISO 27001, Cyber Essentials (plus), ISO 22301and/or NIST controls Good awareness ofIT security measures, best practices and industry standards. Experience with incident response procedures and tools. Good understanding ofcyber security and technology Knowledge ofcloud security orservices, especially AWS Practical and/or theoretical knowledge ofsecurity protocols and tools Strong knowledge ofcomputer networking principles and protocols Experience with network support and troubleshooting Familiarity with operating systems such asLinux, etc. Familiarity with Kubernetes Proficiency inconfiguring and managing Kubernetes networks Understanding ofnetwork architecture and design principles Knowledge ofPKI (Public Key Infrastructure) concepts and implementation Experience with APIs (Application Programming Interfaces) for integration purposes Familiarity with WAF, Experience with monitoring tools, such asPrometheus, Kibana, Grafana, Experience working with AST (Application Security Testing) tools and their integration into the CI/CDpipeline. Knowledgeable ofCloud Networking &Security (WAF, DNS, Subnets, VPCs, VPNs, IAM, Roles, Security Groups) Would beaplus : Some coding knowledge isabonus, but overall understanding ofcoding practices isrequired; SecOps approaches will beplus; Experience with Atlassian tools like Jira and Confluence. AWS certification. Weoffer: Remote work with flexible schedule 5/2; Official salary; Opportunity for rapid career and professional growth; Competitive salary level; Work inateam ofprofessionals; Office inWarsaw. What this job will dofor you: Wehave asocially important project, and wewant tosolve universal problems with payments; Weare ready togive you all necessary knowledge and training, and weare open touse your knowledge and experience toachieve success; Ifyou are proactive, have good communication skills and strive todevelop inthe field offintech, wewill beglad tosee you inour team. Please attach yourCV and acover letter briefly describing yourself and your professional interests.