Information Security Analyst at Altenar in St Julians, Malta, Malta

Altenar is an international IT company founded in 2011, with offices in Malta, Greece, Georgia, the Isle of Man, and Uruguay. We specialize in high-load software development and provide one of the best technology solutions for the iGaming industry worldwide.

The Information Security Analyst shall work closely with various Altenar teams to maintain and improve security and compliance across the organisation. This role will have a strong focus on operational security, cloud environments, and containerisation technologies, such as Kubernetes and GKE. The role reports to the Information Security Team Leader within the Information Security Department. The Information Security team is responsible for designing, maintaining and continually improving the organisation’s overall security posture as well as ensuring technical compliance with applicable data protection laws and gaming industry regulations. The Information Security team also manages and continually enhances the security systems and tools that support the information security management system. This role is open to junior, mid-level or senior candidates, with the final determination based on the qualifications and experience of the successful applicant. Key Responsibilities The Information Security Analyst will be responsible for:

• Assisting in the design, implementation, and continuous improvement of the Information Security Management System (ISMS).
• Monitoring and analysing security alerts from SIEM system and other tools to identify potential threats and vulnerabilities and enhancing detection capabilities.
• Carry out security risk assessments for new software/tools.
• Manage an EDR solution, analyse malware detections and take necessary action to neutralise threats and avoid reoccurrence.
• Supporting and advising DevOps and Engineering teams on secure architecture and development practices.
• Conducting and coordinating vulnerability assessments, network and application penetration testing.
• Ensuring timely patching and system hardening across infrastructure, including cloud and container platforms.
• Developing, maintaining, and enforcing best practices for Kubernetes security.
• Assisting system administrators with security policy deployment and configuration in line with company policies and standards.
• Carry out audits, such as access control evaluations, to ensure policy adherence and data protection.
• Staying current on emerging threats, vulnerabilities, and technologies, and recommending strategies for continuous improvement.
• Assisting with technical compliance activities by identifying gaps, suggesting and implementing remediation actions, gathering evidence of compliance, and supporting internal and external audits (e.g., ISO 27001, GDPR, gaming regulations).
• Participating in incident response, business continuity, and disaster recovery exercises. Required Qualifications and Skills: ● Bachelor's degree in Computer Science, Information Security, or related field. ● Minimum 3 years of experience in an information security role, or in an information technology role that involved implementing information security controls. ● Strong technical background in IT systems, network security, cloud security, and infrastructure. ● Hands-on experience with vulnerability assessment tools and endpoint protection solutions. ● Experience operating SIEM solutions and using penetration testing tools (e.g., Kali Linux). ● Understanding of secure coding practices and common application vulnerabilities. ● Knowledge of identity and access management, encryption, and authentication systems. ● Experience in analysing CVEs and assess risks and provide actionable instructions to mitigate the threats ● Awareness of container security, including architectures, best practices, and associated risks, with some exposure to Kubernetes security or the motivation to develop this expertiseStrong analytical, problem-solving, and communication skills. Desirable Skills: ● Certifications such as CEH, CISSP, CISM, SANS GIAC, or other security certifications. ● Existing CKA Certification is highly preferred. ● Knowledge of Google Cloud Platform (GCP) security models. ● Familiarity with GDPR and Gaming regulatory frameworks such as MGA, UKGC and GLI-33. ● Previous experience working in ISO 27001-certified environments. ● Experience supporting remote or distributed teams.