Senior Information Security Analyst

Altenar is an international IT company founded in 2011, with offices in Malta, Greece, Georgia, the Isle of Man, and Uruguay. We specialize in high-load software development and provide one of the best technology solutions for the iGaming industry worldwide.

Summary

The Information Security Analyst shall work closely with various Altenar teams to maintain and improve security and compliance across the organisation. This role will have a strong focus on operational security, cloud environments, and containerisation technologies, such as Kubernetes and GKE. The role reports to the Information Security Manager within the Information Security Department.

The Information Security team is responsible for designing, maintaining and continually improving the organisation's overall security posture as well as ensuring technical compliance with applicable data protection laws and gaming industry regulations. The Information Security team also manages and continually enhances the security systems and tools that support the information security management system.

This role is open to candidates at both Mid-Level and Senior-Level, with the final determination based on the qualifications and experience of the successful applicant.

Key Responsibilities

The Information Security Analyst will be responsible for:

• Assisting in the design, implementation, and continuous improvement of the Information Security Management System (ISMS).
• Monitoring and analysing security alerts from SIEM system and other tools to identify potential threats and vulnerabilities and enhancing detection capabilities
• Supporting and advising DevOps and Engineering teams on secure architecture and development practices.
• Conducting vulnerability assessments, network and application penetration testing.
• Ensuring timely patching and system hardening across infrastructure, including cloud and container platforms.
• Developing, maintaining, and enforcing best practices for Kubernetes security.
• Assisting system administrators with security policy deployment and configuration in line with company policies and standards.
• Carry out audits, such as access control evaluations, to ensure policy adherence and data protection.
• Staying current on emerging threats, vulnerabilities, and technologies, and recommending strategies for continuous improvement.
• Assisting with technical compliance activities by identifying gaps, suggesting and implementing remediation actions, gathering evidence of compliance, and supporting internal and external audits (e.g., ISO 27001, GDPR, gaming regulations).
• Participating in incident response, business continuity, and disaster recovery exercises.

Required Qualifications and Skills:

• Bachelor's degree in Computer Science, Information Security, or related field.
• Minimum 3 years of experience in an information security role, or in an information technology role that involved implementing information security controls.
• Strong technical background in IT systems, network security, cloud security, and infrastructure.
• Hands-on experience with vulnerability assessment tools and endpoint protection solutions.
• Awareness of container security, including architectures, best practices, and associated risks, with some exposure to Kubernetes security or the motivation to develop this expertise (get the Certified Kubernetes Administrator certification) during the probation period.
• Experience operating SIEM solutions and using penetration testing tools (e.g., Kali Linux).
• Understanding of secure coding practices and common application vulnerabilities.
• Knowledge of identity and access management, encryption, and authentication systems.
• Strong analytical, problem-solving, and communication skills.

Desirable Skills:

• Existing CKA Certification is highly preferred.
• Certifications such as CEH, CISSP, CISM, SANS GIAC, or other security certifications.
• Knowledge of Google Cloud Platform (GCP) security models.
• Familiarity with GDPR and Gaming regulatory frameworks such as MGA, UKGC and GLI-33.
• Previous experience working in ISO 27001-certified environments.
• Experience supporting remote or distributed teams.

What we offer:

• Stable and flexible working environment
• Career growth opportunity
• Training and professional development events
• Health insurance for employees and close family members
• Teamwork and accountability
• Sense of community and defined company culture
• International work environment
• Diverse workplace
• Gym reimbursement after successfully passing probationary period