IT Security Analyst

About TechBiz Global

TechBiz Global is a leading recruitment and software development company. Our diverse, globally distributed team provides IT recruitment, outstaffing, outsourcing, software development, and different consulting services with a primary focus on making our partners achieve their business goals successfully.

With headquarters in Germany we have successful clients all over the world. We can understand your unique needs. Our team has hands-on experience with the challenges that come with rapid growth and the IT sector. That’s why all of our offerings are built with a tech mindset.

Responsibilities:

• Identity and Access Management:

  • Manage and maintain Active Directory (AD) permissions, ensuring appropriate Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) policies.

  • Review and implement single sign-on (SSO) solutions to streamline useraccess while maintaining security.

• Hardware and Infrastructure Security:

  • Ensure proper patching and vulnerability management for all infrastructure components.

  • Monitor and respond to CrowdStrike alerts, implementing necessary mitigations.

  • Develop and enforce Bring Your Own Device (BYOD) policies to secure endpoints accessing the network.

• Cloud and Infrastructure Security:

  • Secure infrastructure components by implementing and managing firewalls and other security policies.

  • Ensure that no public IPs are exposed unnecessarily and that communication between applications is secure and efficient.

  • Verify that critical data, especially customer data, is not exposed outside the organization.

  • Ensure that authentication and authorization mechanisms are correctly implemented, particularly for external applications connecting to ERP systems.

• Monitoring and Incident Response:

  • Collect and analyze logs from applications and devices to monitor for unusual activities.

  • Audit user and application activities, ensuring compliance with security policies.

  • Trigger and manage alerts for critical security incidents, and ensure that Intrusion Prevention System (IPS) capabilities are active and effective in the cloud environment.

  • Research the market cyber security trends and prepare training appropriately.

• Documentation:

  • Develop and maintain comprehensive documentation, including guidelines, policies, and flow diagrams for security procedures and incident response plans.