Verafin - Security Analyst

at  Nasdaq

Verafin is a cutting-edge software company focused on delivering next generation fraud and money laundering solutions to financial institutions across North America. Our rapid growth and continuing success means we have an opening for a Security Analyst to join our team. This role performs analysis on security vulnerabilities and works collaboratively throughout Verafin, cloud operations and infrastructure.

Role Responsibilities

• Analyzing security vulnerabilities identified within Verafin’s Cloud infrastructure.
• Querying and correlating security scan data with technical inventory.
• Building reports and dashboards to present findings to code & infrastructure owners.
• Coordinating vulnerability remediation with code & infrastructure owners.
• Ensuring scanning coverage and assisting in remediation of gaps.
• Assessing and improving security processes and tool usage.
• Working with security and operational teams to ensure security standards are met.

Essential Skills & Qualifications

• Diploma or Degree in a Security Management, Programming, Computer Science or equivalent.
• 2+ years work experience in security vulnerability analysis in a cloud environment would be an asset.
• Experience working in a cloud-based environment (AWS preferred).
• Experience working with the following technologies from a security perspective: Vulnerability Scanners/Management, Container Security Tools, Logging & Monitoring Tooling.
• Experience writing queries to analyze data.
• Security certifications would be an asset (CISSP, OSCP, CEH, GSEC, Security+ etc.)
• Strong technical analytical skills while providing accurate analysis of security-related problems in context of Verafin’s environment.
• Committed to continuous learning, understanding new technologies and developing best practices.
• Ability to communicate effectively with other teams.

What does success look like in this role?

• Contribute to the success the Verafin’s security program by offering insight and guidance on response and remediation of security vulnerabilities.
• Review and improve Verafin’s security posture using new tools and processes.
• Be an effective team player, communicator, and have an eagerness to learn and develop new skills.

What are the growth opportunities for this role?

• Technical security career development
• You could become the lead of a team, or the subject matter expert of your current team

After the purchase of Verafin by Nasdaq in 2021, we are excited to announce as of Jan 1st 2024 we have started to move toward becoming a fully integrated part of Nasdaq. The job you are applying for will be for the Verafin team as part of the larger Nasdaq organization. The folks involved in the recruitment process will be part of the Verafin team. If you are selected for an interview, we are happy to discuss any questions you may have related to these changes. Thank you for your interest in Verafin, a Nasdaq company.
This job posting will close on September 13 at 11:59PM Newfoundland time.
This position offers the opportunity for a hybrid work environment (2 days a week in office), providing flexibility and accessibility for qualified candidates.
Come as You Are
Nasdaq is an equal opportunity employer. We positively encourage applications from suitably qualified and eligible candidates regardless of age, color, disability, national origin, ancestry, race, religion, gender, sexual orientation, gender identity and/or expression, veteran status, genetic information, or any other status protected by applicable law.
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request an accommodation.

Role Responsibilities

• Analyzing security vulnerabilities identified within Verafin’s Cloud infrastructure.
• Querying and correlating security scan data with technical inventory.
• Building reports and dashboards to present findings to code & infrastructure owners.
• Coordinating vulnerability remediation with code & infrastructure owners.
• Ensuring scanning coverage and assisting in remediation of gaps.
• Assessing and improving security processes and tool usage.
• Working with security and operational teams to ensure security standards are met

What does success look like in this role?

• Contribute to the success the Verafin’s security program by offering insight and guidance on response and remediation of security vulnerabilities.
• Review and improve Verafin’s security posture using new tools and processes.
• Be an effective team player, communicator, and have an eagerness to learn and develop new skills

What are the growth opportunities for this role?

• Technical security career development
• You could become the lead of a team, or the subject matter expert of your current tea