Information Security Analyst

Altenar is an international IT company founded in 2011, with offices in Malta, Greece, Georgia, the Isle of Man, and Uruguay. We specialize in high-load software development and provide one of the best technology solutions for the iGaming industry worldwide.

• The Information Security Analyst shall work closely with various Altenar teams to maintain and
• improve security and compliance across the organisation. This role will have a strong focus on
• operational security, cloud environments, and containerisation technologies, such as Kubernetes and
• GKE. The role reports to the Information Security Team Leader within the Information Security
• Department.
• The Information Security team is responsible for designing, maintaining and continually improving the
• organisation’s overall security posture as well as ensuring technical compliance with applicable data
• protection laws and gaming industry regulations. The Information Security team also manages and
• continually enhances the security systems and tools that support the information security
• management system.
• This role is open to junior, mid-level or senior candidates, with the final determination based on the
• qualifications and experience of the successful applicant.
• Key Responsibilities
• The Information Security Analyst will be responsible for:
• - Assisting in the design, implementation, and continuous improvement of the Information
• Security Management System (ISMS).
• - Monitoring and analysing security alerts from SIEM system and other tools to identify potential
• threats and vulnerabilities and enhancing detection capabilities.
• - Carry out security risk assessments for new software/tools.
• - Manage an EDR solution, analyse malware detections and take necessary action to
• neutralise threats and avoid reoccurrence.
• - Supporting and advising DevOps and Engineering teams on secure architecture and
• development practices.
• - Conducting and coordinating vulnerability assessments, network and application penetration
• testing.
• - Ensuring timely patching and system hardening across infrastructure, including cloud and
• container platforms.
• - Developing, maintaining, and enforcing best practices for Kubernetes security.
• - Assisting system administrators with security policy deployment and configuration in line with
• company policies and standards.
• - Carry out audits, such as access control evaluations, to ensure policy adherence and data
• protection.
• - Staying current on emerging threats, vulnerabilities, and technologies, and recommending
• strategies for continuous improvement.
• - Assisting with technical compliance activities by identifying gaps, suggesting and
• implementing remediation actions, gathering evidence of compliance, and supporting internal
• and external audits (e.g., ISO 27001, GDPR, gaming regulations).
• - Participating in incident response, business continuity, and disaster recovery exercises.
• Required Qualifications and Skills:
• ● Bachelor's degree in Computer Science, Information Security, or related field.
• ● Minimum 3 years of experience in an information security role, or in an information technology
• role that involved implementing information security controls.
• ● Strong technical background in IT systems, network security, cloud security, and
• infrastructure.
• ● Hands-on experience with vulnerability assessment tools and endpoint protection solutions.
• ● Experience operating SIEM solutions and using penetration testing tools (e.g., Kali Linux).
• ● Understanding of secure coding practices and common application vulnerabilities.
• ● Knowledge of identity and access management, encryption, and authentication systems.
• ● Experience in analysing CVEs and assess risks and provide actionable instructions to
• mitigate the threats
• ● Awareness of container security, including architectures, best practices, and associated risks,
• with some exposure to Kubernetes security or the motivation to develop this expertiseStrong
• analytical, problem-solving, and communication skills.
• Desirable Skills:
• ● Certifications such as CEH, CISSP, CISM, SANS GIAC, or other security certifications.
• ● Existing CKA Certification is highly preferred.
• ● Knowledge of Google Cloud Platform (GCP) security models.
• ● Familiarity with GDPR and Gaming regulatory frameworks such as MGA, UKGC and GLI-33.
• ● Previous experience working in ISO 27001-certified environments.
• ● Experience supporting remote or distributed teams.