Information Security Analyst

About the role

The Cyber Security Analyst (Defensive Security) will support the organization’s security architecture and infrastructure protection functions within a fast‑paced Fintech environment. Working under the guidance of senior security architects and engineers, the analyst will gain hands‑on experience across cloud security, endpoint protection, secure SDLC practices, and security monitoring.

Key responsibilities

• Assist senior architects in documenting and maintaining security architecture designs and ensuring alignment with standards and regulations.
• Monitor cloud environments (GCP/AWS) for misconfigurations using CSPM tools and help document cloud infrastructure configurations.
• Support CI/CD pipeline security by integrating and operating tools such as SAST, DAST, and dependency scanners.
• Review and triage automated security scan results, flagging critical findings for senior review.
• Participate in vulnerability assessment and penetration testing activities for web, mobile, and API services.
• Maintain up‑to‑date architecture diagrams, design documentation, and security control mappings.

Required profile

• Works under close guidance of senior security architects and engineers.
• Foundational member of a defensive security team in a Fintech setting.

Required skills

• GCP
• AWS
• Terraform
• Kubernetes
• CI/CD pipelines
• SAST
• DAST
• Dependency scanning
• OWASP Top 10 awareness