Information Security Analyst

**About Next Gate Tech**: At Next Gate Tech, we create technologies that reshape the landscape of the fund industry operations. We empower our clients by capturing the full potential of harmonized data to drive intelligent and fully automated operations. Our transformative solutions optimize processes, enhance efficiency, reduce risks, and drive cost savings for our clients. Driven by our commitment to innovation, our intelligence layer extracts invaluable insights, employs advanced pattern analysis spotting anomalies, and uncovers hidden links within the data. Our modular, one-stop-shop, SaaS platform seamlessly ingests diverse datasets, creating a harmonized and enriched source of portfolios, transactions, and accounting data. This robust foundation fuels the platform to generate powerful signals through intelligent analytics, empowering a multitude of use cases. Next Gate Tech is not just a part of the industry's evolution - it is a driving force behind it. Learn more about us: **About You**: Moving at our pace brings a lot of change, possibilities, and ambiguity. Before you apply, consider if you have the following skills: - ** Attention to Detail**: Detecting even the smallest irregularities can make the difference between preventing a major data breach or suffering significant losses. - ** Communication Skills**: In the event of a security incident, you'll need to work closely with non-technical stakeholders, thoroughly document the investigative and recovery processes, and may also be responsible for educating colleagues on optimal security practices. - ** Analytical Thinking**: Whether addressing a security threat, fixing a vulnerability, or suggesting new protocols, strong analytical skills are essential for making well-informed, data-backed decisions. - ** Curiosity and Adaptability**: As technology advances and cybercriminal tactics evolve, staying curious and continuously learning about new threats and security trends will help you stay ahead in protecting valuable data. - ** Composure in High-Stress Situations**:Quick, decisive action is crucial when responding to a security event. Remaining calm and prioritizing tasks effectively will help mitigate the impact of potential breaches or attacks. **About The Role**: "Hello I’m David, the Information Security Manager at Next Gate Tech. We’re seeking a proactive and detail-oriented Cyber Security Analyst to join our team. In this role, you will be at the forefront of protecting our company's critical information, assisting in the day-to-day management of security operations and ensuring our systems remain secure and compliant. A key aspect of your role will involve working closely with product teams throughout the development lifecycle to ensure security standards are integrated at every stage. This collaboration ensures that any potential risks are identified and mitigated early, helping us maintain the highest level of security across our products. You'll also be responsible for monitoring our production environment for potential threats, auditing systems for compliance, and assisting with incident response when needed. If you’re passionate about cybersecurity and eager to make an impact, we’d love to hear from you." - Responsibilities include_ - Assist the Information Security Manager in the day to day management of all matters relating to information security - Collaborate with product teams throughout the system development lifecycle to ensure security requirements are met and standards are maintained - Monitoring the production environment for information security events and raising them to the Information Security Manager when required - Audit software and hardware components to ensure compliance with industry best practices and relevant standards - Assisting with the implementation and maintenance of Information Security Controls across the organization - Monitoring and managing Information Security Tickets and requests from colleagues - Monitor device endpoints and report on trends and incidents - Play a key role in developing and testing backups and disaster recovery controls - Help update and maintain IAM controls and access control lists in line with Joiners, Movers, Leavers processes - Conduct internal penetration testing on products and new features - Assist in managing patch management and updates - Qualifications_ - Proven experience in a Cyber Security related role, ideally from a SaaS background - Experience with red team tools and techniques (Burp Suite, OWASP ZAP, Nessus, Nmap, Metasploit) - Blue team tools (Qualys Vulnerability Scanner, AV, DLP) - Building custom queries in SIEM and GCP logging tools - Proven GCP management knowledge, VPC networking, managing threats in SCC, IAM - Knowledge of software architecture - Knowledge of security best practices in cloud environments - A basic understanding of Python for purposes of security code review - Strong experience with Windows, Mac and Linux operating systems - Knowled