Information Security Analyst

Altenar is an international IT company founded in 2011, with offices in Malta, Greece, Georgia, the Isle of Man, and Uruguay. We specialize in high-load software development and provide one of the best technology solutions for the iGaming industry worldwide.

The Information Security Analyst shall work closely with various Altenar teams to maintain and
improve security and compliance across the organisation. This role will have a strong focus on
operational security, cloud environments, and containerisation technologies, such as Kubernetes and
GKE. The role reports to the Information Security Team Leader within the Information Security
Department.
The Information Security team is responsible for designing, maintaining and continually improving the
organisation’s overall security posture as well as ensuring technical compliance with applicable data
protection laws and gaming industry regulations. The Information Security team also manages and
continually enhances the security systems and tools that support the information security
management system.
This role is open to junior, mid-level or senior candidates, with the final determination based on the
qualifications and experience of the successful applicant.
Key Responsibilities
The Information Security Analyst will be responsible for:
- Assisting in the design, implementation, and continuous improvement of the Information
Security Management System (ISMS).
- Monitoring and analysing security alerts from SIEM system and other tools to identify potential
threats and vulnerabilities and enhancing detection capabilities.
- Carry out security risk assessments for new software/tools.
- Manage an EDR solution, analyse malware detections and take necessary action to
neutralise threats and avoid reoccurrence.
- Supporting and advising DevOps and Engineering teams on secure architecture and
development practices.
- Conducting and coordinating vulnerability assessments, network and application penetration
testing.
- Ensuring timely patching and system hardening across infrastructure, including cloud and
container platforms.
- Developing, maintaining, and enforcing best practices for Kubernetes security.
- Assisting system administrators with security policy deployment and configuration in line with
company policies and standards.
- Carry out audits, such as access control evaluations, to ensure policy adherence and data
protection.
- Staying current on emerging threats, vulnerabilities, and technologies, and recommending
strategies for continuous improvement.
- Assisting with technical compliance activities by identifying gaps, suggesting and
implementing remediation actions, gathering evidence of compliance, and supporting internal
and external audits (e.g., ISO 27001, GDPR, gaming regulations).
- Participating in incident response, business continuity, and disaster recovery exercises.
Required Qualifications and Skills:
● Bachelor's degree in Computer Science, Information Security, or related field.
● Minimum 3 years of experience in an information security role, or in an information technology
role that involved implementing information security controls.
● Strong technical background in IT systems, network security, cloud security, and
infrastructure.
● Hands-on experience with vulnerability assessment tools and endpoint protection solutions.
● Experience operating SIEM solutions and using penetration testing tools (e.g., Kali Linux).
● Understanding of secure coding practices and common application vulnerabilities.
● Knowledge of identity and access management, encryption, and authentication systems.
● Experience in analysing CVEs and assess risks and provide actionable instructions to
mitigate the threats
● Awareness of container security, including architectures, best practices, and associated risks,
with some exposure to Kubernetes security or the motivation to develop this expertiseStrong
analytical, problem-solving, and communication skills.
Desirable Skills:
● Certifications such as CEH, CISSP, CISM, SANS GIAC, or other security certifications.
● Existing CKA Certification is highly preferred.
● Knowledge of Google Cloud Platform (GCP) security models.
● Familiarity with GDPR and Gaming regulatory frameworks such as MGA, UKGC and GLI-33.
● Previous experience working in ISO 27001-certified environments.
● Experience supporting remote or distributed teams.