Security Analyst
PayU
full-time
Posted on:
Location Type: Hybrid
Location: Bogota • 🇨🇴 Colombia
Visit company websiteJob Level
Mid-LevelSenior
Tech Stack
AWSAzureCloudGoogle Cloud PlatformSplunk
About the role
- Monitor, analyze, and respond to security alerts and events from IDS/IPS, SIEM, endpoint protection, and security alerts
- Investigate suspicious activity, correlate logs, and assist in the escalation and containment of potential security incidents, if necessary.
- Maintain and validate the security-related asset inventory, especially across payment infrastructure.
- Support access control and user account lifecycle processes across internal and third-party systems as well as profiles management.
- Provide input for the improvement of security monitoring rules, incident handling processes, and documentation.
- Contribute to PCI DSS-related tasks and assessments by collecting evidence, validating controls, and supporting audit processes under BAU requirements
- Monitor Third Party vendors that interact in the PCI DSS ecosystem on our environment
- Overview of Policies, Standards, procedures over different security domains
Requirements
- Bachelor’s or Technologist degree in Computer, Telecommunications, Electronics, Information Technology, or a related field.
- At least 3 years of hands-on experience in Information Security, as a security analyst or similar.
- Experience with security tools such as SIEM (e.g., Splunk, QRadar, etc.), IDS/IPS, and endpoint protection platforms (EDR).
- Working knowledge of vulnerability scanning tools and basic remediation tracking.
- Basic Experience with access management principles and identity governance like users, roles, profiles, permissions, etc.
- Understanding of cyber incident response processes and security best practices.
- Security Awareness of compliance requirements such as PCI DSS, with some prior exposure to audits or control implementation.
- Basic English proficiency (reading alerts, writing documentation, and communicating with international teams).
- Desired but not mandatory:
- Security graduate degree in Security (could be compensated with experience)
- Cloud technologies experience (e.g. AWS, Azure, GCP, etc.)
- Industry certifications (e.g., CompTIA Security+, ISO 27001 or others)
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
Information Securitysecurity analysisincident responsevulnerability scanningaccess managementidentity governancesecurity monitoringremediation trackingsecurity best practicesPCI DSS compliance
Soft skills
communicationanalytical thinkingproblem-solvingcollaborationattention to detail
Certifications
CompTIA Security+ISO 27001