The Security Analyst role will assist the Information Security leadership with daily information security operation and security related projects to improve Corza’s security posture. In this role the successful candidate will serve as a security specialist for Corza’s global Security team. The position will support all levels of the business including business partners, internal customers as well as external stakeholders and/or vendors

• Support the cyber security incident response procedure, including investigation, counter measure, and recovery from cyber security attacks, unauthorized access, and policy breaches; engage, interact, and coordinate with other internal teams.
• Review and analyze security related logs; recognize problems by identifying abnormalities and investigate possible cause of being compromised.
• Conduct security evaluation of cloud services to show how vulnerabilities can be exploited to compromise the system to gain access, leaking data, privilege escalation, modify system configurations.
• Review/Remediate security configuration of security appliance and platform.
• Work with internal IT team to perform system hardening and compliance check on a regular basis to ensure our cloud service meets the requirements of ISO27001.
• Investigate events or incidents of apparent security breaches and report to appropriate authorities using corporate procedures.
• Comprehensive understanding of computer systems, Databases, Applications and network security: including system vulnerabilities analysis.

• A bachelor’s degree in computer science or related technical experience
• 3+ years of experience in information security role
• Nice to have certification in one or more of the following is strongly desirable: CISSP, CISA, SSCP

• Working knowledge of information security control technologies including access control, cryptography, vulnerability management, SIEM/log management, ID/IPS.
• Working knowledge of Azure AD security (MFA, Conditional Access, etc)
• Familiarity with Security Access solutions such as VPN/SASE/ZTNA/NG Firewall is highly valued.
• Working knowledge of passive/offensive security testing tools
• Nice to have working knowledge with various information security frameworks (ISO/IEC 27001, NIST, COBIT, etc.).
• Strong problem solving and technical skills.
• Multilingual preferred and English is required.
• Ability to work independently as well as in the team environment is essential.