**Vacancy Name**
- Security Analyst
**Location of Work**
- Tijuana, Mexico
**Employment Type**
- Full Time Employee
- At **Corza Medical**, we are motivated by enabling our customers' success. That starts with understanding their needs and developing products that enhance clinical outcomes. Our goal is to provide innovative, high-quality products and service that will ensure the continued success of our company and the surgical professional well into the future.
- Our precision manufacturing expertise along with our highly targeted sales and marketing capabilities help us offer novel and differentiated medical device products to patients and physicians, as well as to other medical device manufacturers and distributors.
- Commitment to the Customer, Sense of Urgency, Focus, Accountability, and Teamwork define our culture and our organization and drive everything that we do.
- We are seeking progressive, creative, customer oriented and highly skilled individuals for unparalleled opportunity.
- **Role**:
The Security Analyst role will assist the Information Security leadership with daily information security operation and security related projects to improve Corza's security posture.-
**Responsibilities**:
- Support the cyber security incident response procedure, including investigation, counter measure, and recovery from cyber security attacks, unauthorized access, and policy breaches; engage, interact, and coordinate with other internal teams.
- Review, and analyze security related logs; recognize problems by identifying abnormalities and investigate possible cause of being compromised.
- Conduct security evaluation of cloud services to show how vulnerabilities can be exploited to compromise the system to gain access, leaking data, privilege escalation, modify system configurations.
- Review/Remediate security configuration of security appliance and platform.
- Work with internal IT team to perform system hardening and compliance check on a regular basis to ensure our cloud service meet the requirements of ISO27001.
- Investigate events or incidents of apparent security breaches and report to appropriate authorities using corporate procedures.
- Comprehensive understanding of computer systems, Databases, Applications and network security: including system vulnerabilities analysis.
**Requirements**:
- Working knowledge of information security control technologies including access control, cryptography, vulnerability management, SIEM/log management, ID/IPS.
- Working knowledge of Azure AD security (MFA, Conditional Access, etc)
- Familiarity with Security Access solutions such as VPN/SASE/ZTNA/NG Firewall is highly valued.
- Working knowledge of passive/offensive security testing tools
- Nice to have working knowledge with various information security frameworks (ISO/IEC 27001, NIST, COBIT, etc.).
- Strong problem solving and technical skills.
- Multilingual preferred and English is required.
- Ability to work independently as well as in the team environment is essential.
**Basic Qualifications**:
- Degree in Computer Science or equivalent combination of education and experience.
- 3 to 5 years of experience in information security role
- Nice to have certification in one or more of the following is strongly desirable:
- CISSP, CISA, SSCP