Information Security Analyst Full Time

Information Security Analyst

With a global team of 5600+ IT professionals, DHL IT Services connects people and keeps the global economy running by continuously innovating and creating sustainable digital solutions. We work beyond global borders and push boundaries across all dimensions of logistics. You can leave your mark shaping the technology backbone of the biggest logistics company of the world. All our locations have earned the #GreatPlaceToWork certification, reflecting our commitment to exceptional employee experiences.

Digitalization. Simply delivered.

At IT Services, we are passionate about technology. Our Vulnerability management team under Information Security Services department team is continuously expanding. No matter your level of Security Analyst proficiency, you can always grow within our diverse environment.

#DHL #DHLITServices #GreatPlace

Grow together.

As a Information Security Analyst in Information Security Service team, you will play a pivotal role in shaping secure digital solutions across DHL Group. Collaborating closely with the IT Security, Risk and Compliance Management team, you will help ensure the confidentiality, integrity, and availability of our IT infrastructure and assets.

Your contributions will span:

• Advanced Vulnerability Management Practices and threat modeling
• Continuously identify, evaluate, assess, report and monitor vulnerabilities along our infrastructure and application landscape.
• Support and maintain the vulnerability detection and mitigation best practice.
• Tracking and maintain the vulnerability process cycle to ensure timely closure of all vulnerability findings
• Actively investigate the latest in security vulnerabilities, vendor advisories, security incidents, and penetration techniques and notify stakeholders when appropriate
• Strategic Threat Intelligence
• Proactive vulnerability assessment
• Leadership in Vulnerability Management and secure architecture design
• Oversight of compliance assessments including ISO readiness and data protection

Ready to embark on the journey? Here’s what we are looking for:

• 4+ years of experience in threat and vulnerability management in complex environments.
• Threat centric understanding of Vulnerability management
• Experience in VM & policy compliance scanning tools
• Experience with CIS benchmarks, ISO27001, NIST, and BSI recommendations as well as OWASP best practices
• Participate in any incident response triage and proactive analysis in information security related vulnerabilities detection and mitigation in the network, systems and/or application
• Provide regular updates to the stakeholders on security assessment reports with detailed security issues and recommend workarounds
• Good understanding of industry threat frameworks. E.g CVSS & MITRE ATT&CK
• Provide support and assistance, as well as participate, in ongoing and future projects and initiatives related to vulnerability management
• Continuously provide security assessment and consultation on firewall/network link request.
• Experience in automating recurring tasks by scripting and API utilization
• Strong understanding of attack signatures
• Ability to adapt to dynamic threat landscape in a global environment
• Ability to work unsupervised, under pressure and meet deadlines
• Communication and time-management skills
• Creative with strong commitment to quality and excellence
• Educated to degree level in IT Security, Engineering or equivalent
• Strong analytical skills and efficient problem solving
• Fluency in English

What Is The Plus Point(s)”

• Industry certifications” GIAC (GWEB, GPEN), CISA, CompTIA Security+, CEH
• Advance hand on experience in any 2 industry leading vulnerability scanning tool.

An array of benefits for you:

• Hybrid work arrangements to balance in-office collaboration and home flexibility.
• Annual Leave: 42 days off apart from Public / National Holidays.
• Medical Insurance: Self + Spouse + 2 children. An option to opt for Voluntary Parental Insurance (Parents / Parent -in-laws) at a nominal premium covering pre existing disease.
• In House training programs: professional and technical training certifications.