Security Analyst

About Piano  

Piano's Digital Revenue Optimization solution helps digital services grow revenue by better understanding and influencing their customers' behavior. Piano unifies analytics, segmentation, and commercial personalization in one AI-driven application, enabling sites and apps to efficiently maximize the value of every user visit. Headquartered in Amsterdam with offices in the Americas, Europe, and Asia-Pacific, Piano serves a global client base including the BBC, Deutsche Telekom, Nikkei, AXA and the Wall Street Journal. 

RoleOverview 

As theSecurity Analyst, you will be part of the security team and collaborate with development and operations teams to ensure the seamless and secure delivery of applications and services. Security Analyst reports to Chief Information Security Officer
and cooperates with Security engineer. 

Responsibilities: 

1. Monitoring and Analysis:Monitor security systems, logs, and alerts to detect and respond to fraudulentacitivities, securityevents, and security incidentsin atimelymanner. Conduct analysis of security events and incidents toidentifytrends, threats, and vulnerabilities. 
2. Vulnerability Management:Assist in vulnerability assessments and penetrationtesting activities.Identify and prioritize security vulnerabilities and work withrelevant teams to remediate them. 
3. Security Tools Management:Assist in the administration and maintenance ofsecurity tools used by Piano such as intrusion detection/prevention systems,firewalls, endpoint protection, and security information and event management(SIEM) systems. 
4. Incident Response:Participate in incident response activities, includinginvestigation, containment, and resolution of security incidents. Documentincident response procedures and lessons learned for continuous improvement. 
5. Security Awareness:Support security awareness initiatives by creating anddelivering training materials, conducting security awareness campaigns, andpromoting best practices among staff members. 
6. Compliance and Policy Adherence:Assist in ensuring compliance with relevantregulations, standards, and policies (e.g., GDPR, HIPAA, ISO 27001, PCI DSS).Contribute to the development and maintenance of security policies,procedures and guidelines. 
7. Security Projects: Collaborate with cross-functional teams on security-relatedprojects and initiatives, such as security infrastructure upgrades, riskassessments, and security audits. 
8. Support of Secure software development:Maintain security controlsthroughout the software development lifecycle according to various securecoding practices (such as OWASP) toidentify and mitigate security risks.Integrate security tools and processes into the CI/CD pipeline to ensureautomated security testing and validation.Identify and recommend fixes forsecurity issues in the codebase. Work with other engineers to fix othervulnerabilities in the application layer. 
9. Continuous improvement:Automate security processes to enhance efficiencyand reduce manual intervention, including vulnerability scanning, configurationmanagement, and incident response. 

Requirements: 

• Bachelor's degree in computer science, Information Security, orrelated field. 

• Experience with security tools such as vulnerability scanners (Shodan.io, Nessus,DefectDojo), IDS/IPS, and code analysis tools (SonarQube). 

• Strong scripting and automation skills (e.g., Python, Bash, PowerShell) 

Perks at Piano:  

• Multisport card 

• Lunch tickets 

• Paid Sick days (3 days per half-year) 

• 2 extra vacation days/year 

• Possibility to work from home several days a week 

• Ongoing career guidance and mentoring 

• Introductory training and self-learning 

• Refer-a-Friend – get a bonus in the employee referral program 

Applicants must have authorization to work in this jurisdiction without sponsorship from Piano.