Verafin - Analyst - Information Security

St. John's, NLOnsiteFull TimePosted 9 days ago

Is this role right for you?

Upload your resume and get a skill-by-skill breakdown — see exactly where you match, where you're close, and what to highlight. Not a mystery percentage.

Get a tailored resume highlighting what this role needs.

Required skills

security vulnerability analysis
cloud environment
Vulnerability Scanners/Management
Container Security Tools
Logging & Monitoring Tooling
queries
technical analytical skills
security standards

Nice to have

AWS
CISSP
OSCP
CEH
GSEC
Security+

Role summary

Verafin is seeking an Information Security Analyst to analyze security vulnerabilities in their cloud infrastructure. This role involves querying security scan data, building reports, coordinating remediation efforts, and improving security processes and tool usage. The ideal candidate will have experience in a cloud environment, proficiency with vulnerability scanners, container security tools, logging/monitoring tools, and data analysis through queries. Strong technical analytical skills and effective communication are essential. Security certifications are a plus.

Role Responsibilities

Analyzing security vulnerabilities identified within Verafin's Cloud infrastructure.

Querying and correlating security scan data with technical inventory.

Building reports and dashboards to present findings to code & infrastructure owners.

Coordinating vulnerability remediation with code & infrastructure owners.

Ensuring scanning coverage and assisting in remediation of gaps.

Assessing and improving security processes and tool usage.

Working with security and operational teams to ensure security standards are met.

Essential Skills & Qualifications

Diploma or Degree in a Security Management, Programming, Computer Science or equivalent.

1+ years experience in security vulnerability analysis in a cloud environment would be an asset.

Experience working in a cloud-based environment (AWS preferred).

Experience working with the following technologies from a security perspective: Vulnerability Scanners/Management, Container Security Tools, Logging & Monitoring Tooling.

Experience writing queries to analyze data.

Security certifications would be an asset (CISSP, OSCP, CEH, GSEC, Security+ etc.)

Strong technical analytical skills while providing accurate analysis of security-related problems in context of Verafin’s environment.

Committed to continuous learning, understanding new technologies and developing best practices.

Ability to communicate effectively with other teams.

What does success look like in this role?

Contribute to the success the Verafin’s security program by offering insight and guidance on response and remediation of security vulnerabilities.

Review and improve Verafin’s security posture using new tools and processes.

Be an effective team player, communicator, and have an eagerness to learn and develop new skills.

What are the growth opportunities for this role?

Technical security career development

You could become the lead of a team, or the subject matter expert of your current team

Come as You Are

Nasdaq is an equal opportunity employer. We welcome applications from candidates of all backgrounds and identities. We are committed to fostering an inclusive workplace where diverse perspectives, experiences, and identities are valued and celebrated. We ensure that individuals with disabilities are provided with reasonable accommodation throughout the hiring process.

To learn how Nasdaq collects and uses your personal data during the recruitment process, please review our Job Applicant Data Protection Notice.

Ready to apply?

You'll be redirected to NASDAQ's application page.