Information Security Senior Officer -- Purple Security
Raiffeisen Bank Albania
/job-details/6815
We are seeking a dynamic and versatile Cybersecurity Specialist skilled in both defensive and offensive security disciplines. The ideal candidate combines hands-on expertise in threat detection, incident response, and digital forensics with strong capabilities in penetration testing, vulnerability assessments, and OSINT-driven threat intelligence to proactively protect and challenge our security environment.
**What is expected of you?**
- Continuously monitor security alerts and logs from SIEM systems, endpoint detection tools, and other security tools
- Research, track, and analyze Indicators of Compromise (IOCs) and threat actor profiles using sources that include open-source (OSINT), dark web forums, government feeds, and commercial intelligence platforms.
- Conduct detailed analysis of Threat Actor Tactics, Techniques, and Procedures (TTPs) and malware.
- Drive and oversee offensive security engagements, pentest, threat-based evaluations, social engineering and vulnerability identification.
- Lead incident response efforts, including containment, eradication, and recovery.
- Develop and maintain playbooks, processes, documentation surrounding both technical and non-technical service functions and tasks.
- Expertise with modern penetration testing tools and relevant platforms to effectively identify and exploit vulnerabilities.
- Maintain a strong knowledge of current and emerging security threats, determining applicability and proactively implementing mitigations
- Able to work across and communicate with multiple functions (technical and non-technical), building productive relationships with stakeholders to foster a culture of security awareness and responsibility.
**What you need to have:**
- Proficiency in English is a must.
- University Degree in Computer Sciences or related.
- 3-5 years of proven experience on both Offensive and Defensive Disciplines.
- Hands-on experience with vulnerability assessment tools.
- Experience with the MITRE ATT&CK and OWASP frameworks, threat intelligence, and forensic analysis.
- Strong knowledge of security frameworks and practices.
- Ability to work independently, lead initiatives with supervision, and maintain clarity under pressure.
- Security certification/accreditation (CISSP, GIAC, CEH, OCSP) desirable.
**What is expected of you?**
- Continuously monitor security alerts and logs from SIEM systems, endpoint detection tools, and other security tools
- Research, track, and analyze Indicators of Compromise (IOCs) and threat actor profiles using sources that include open-source (OSINT), dark web forums, government feeds, and commercial intelligence platforms.
- Conduct detailed analysis of Threat Actor Tactics, Techniques, and Procedures (TTPs) and malware.
- Drive and oversee offensive security engagements, pentest, threat-based evaluations, social engineering and vulnerability identification.
- Lead incident response efforts, including containment, eradication, and recovery.
- Develop and maintain playbooks, processes, documentation surrounding both technical and non-technical service functions and tasks.
- Expertise with modern penetration testing tools and relevant platforms to effectively identify and exploit vulnerabilities.
- Maintain a strong knowledge of current and emerging security threats, determining applicability and proactively implementing mitigations
- Able to work across and communicate with multiple functions (technical and non-technical), building productive relationships with stakeholders to foster a culture of security awareness and responsibility.
**What you need to have:**
- Proficiency in English is a must.
- University Degree in Computer Sciences or related.
- 3-5 years of proven experience on both Offensive and Defensive Disciplines.
- Hands-on experience with vulnerability assessment tools.
- Experience with the MITRE ATT&CK and OWASP frameworks, threat intelligence, and forensic analysis.
- Strong knowledge of security frameworks and practices.
- Ability to work independently, lead initiatives with supervision, and maintain clarity under pressure.
- Security certification/accreditation (CISSP, GIAC, CEH, OCSP) desirable.
