Cybersecurity Analyst

5 years of experience with a vulnerability scanner and vulnerability management lifecycle, with cloud security constructs across major providers (AWS, Azure), including AWS Security Groups/NACLs, Azure NSGs, AWS Network Firewall, or Azure Firewall.

General knowledge of best practices in IAM as well as application security i.e. Security control frameworks like NIST/CIS, OWASP top 10 risks, and basic SAST/DAST concepts

Coordinate, advise and support the implementation of application security controls, container scanning, and secure baseline configurations within deployment pipelines (e.g. change management, validation, testing control effectiveness).

Maintain audit-ready evidence for control assessments and verify that remediation actions are effective before findings are closed.

Manage time-bound security control exceptions, including documented risk acceptance, compensating controls, accountable owners, expiry dates, and escalation of overdue actions.

Demonstrates excellent communication and interpersonal skills, fostering a collaborative and supportive team environment.

Possesses understanding of best practices in Identity and Access Management (IAM), vulnerability management, cyber security incident handling, firewall management.

Relevant technical certifications (AWS, Microsoft, or vendor neutral)

Degree in Information Technology or related fields

Other responsibilities:

As operational demand requires, serve as the cybersecurity operational liaison within the integrated operations center (IOC), collaborating with network, cloud, and systems engineering teams to correlate cross-domain telemetry.

Provide overflow support to monitor, alert on, and analyze security telemetry across multi-cloud environments, checking alignment with baseline security configurations and compliance frameworks.

Collaborate with Yara SOC, where needed, on triage, initial containment, and coordination of operational security incidents, facilitating root-cause analysis and operational post-mortems across functional domains.

Support the implementation, testing, and documentation of approved security group, network ACL, and cloud firewall rule changes with the responsible engineering teams.

Participate in daily stand-up meetings, where applicable.

Knowledge grows through differences Yara is committed to creating a diverse and inclusive environment and is proud to be an equal opportunity employer. We believe that creating a diverse and inclusive work environment is not only the right thing, but also the smart thing to do. To deliver on this, Yara has firmly anchored Diversity, Equity & Inclusion (DE&I) in our business strategy and has more than 400 employees worldwide involved in D&I ambassadors networks.

As part of our recruitment process, where permitted by local law, we may conduct reference and background checks. These checks will only be performed when deemed necessary for the nature of the job. Candidates will be informed by HR before any background checks are initiated.

Job Segment: Risk Management, Systems Engineer, QA, Change Management, Quality Assurance, Finance, Management, Engineering, Quality, Technology