IT Security Analyst

Scalo is a company offering projects in IT Security and IAM, focusing on enterprise environments with high security and compliance requirements.

• Minimum 5 years of experience in security
• At least 2 years of experience in IAM projects
• Experience in IT security analysis, security governance, or defining security requirements in enterprise environments
• Good knowledge of IAM, PAM, least privilege, segregation of duties, and secure access governance
• Practical knowledge of secrets and credential management (passwords, SSH keys, API keys, tokens, certificates, service accounts)
• Ability to analyze IT processes, identify control gaps, and translate them into specific security requirements
• Experience collaborating with technical and business teams
• Experience conducting workshops, documenting requirements, and preparing analyses
• Fluent communication in English (minimum B2/C1 level)

Nice to have:

• Experience with tools such as CyberArk, HashiCorp Vault, Azure Key Vault, AWS Secrets Manager, or GCP Secret Manager
• Knowledge of security standards (ISO 27001, NIST, CIS Controls)
• Experience in transformational or migration projects

• Implementing solutions for Secrets & Credential Management in enterprise environments
• Analyzing current processes related to access and credential management in applications, infrastructure, and operational processes
• Identifying, classifying, and documenting technical credentials and access data (e.g., passwords, SSH keys, API keys, tokens, certificates, service accounts)
• Analyzing security gaps and areas for improvement (e.g., shared accounts, hardcoded credentials, lack of rotation or auditability)
• Defining functional and non-functional requirements for centralized credential and access management
• Supporting the design of lifecycle management processes (creation, storage, access, rotation, revocation of permissions)
• Preparing security documentation, gap assessments, risk analyses, and improvement recommendations
• Participating in the evaluation of tools supporting credential management and security governance
• Working in an enterprise environment with high security and compliance demands
• Conducting workshops, documenting requirements, and preparing analyses

100% remote work