Company Overview

The organisation operates within the financial technology sector, supporting digital services that depend on secure applications, protected infrastructure, and effective detection of technical threats. Its technology environment may include cloud-hosted workloads, internal networks, endpoint systems, application services, databases, and third-party integrations used to support financial operations.

The Security Operations & Infrastructure Protection department helps identify and manage vulnerabilities, monitor relevant security events, assess infrastructure exposure, and coordinate remediation with technical teams. Its work combines security monitoring, vulnerability management, configuration reviews, risk assessment, and operational reporting.

The department works closely with infrastructure engineering, cloud operations, application security, and compliance teams to ensure that security weaknesses are prioritised according to their actual exposure and potential impact. The organisation values consistent monitoring, clear documentation, timely escalation, and practical security controls that can be sustained across complex technical environments.

This remote opportunity is suited to a security analyst with strong technical investigation skills who wants to contribute to infrastructure protection and the reduction of cyber risk across financial technology services.

Role Summary

The Infrastructure Security Analyst will monitor infrastructure-related security events, identify vulnerabilities, assess potential exposure, and coordinate remediation with the teams responsible for affected systems. The role requires a practical understanding of operating systems, networks, cloud environments, vulnerability scanning, security logs, and common infrastructure attack techniques.

The successful candidate will review security findings from monitoring platforms and vulnerability assessment tools, validate the relevance of identified issues, and help prioritise corrective actions. Responsibilities will also include tracking remediation deadlines, supporting security investigations, maintaining accurate evidence, and preparing reports that explain infrastructure security posture and outstanding risks.

The position requires an analytical and methodical approach. Automated scanners and monitoring tools can produce false positives or findings that differ significantly in business impact. The analyst must therefore evaluate the technical context, determine the appropriate level of urgency, and work constructively with infrastructure owners to ensure that meaningful risks are addressed.

Key Responsibilities

• Monitor security alerts and relevant logs from infrastructure, cloud platforms, network devices, endpoint systems, and other approved security monitoring sources.

• Review vulnerability assessment results to identify weaknesses affecting servers, operating systems, network services, cloud configurations, and supporting infrastructure.

• Validate reported vulnerabilities and configuration issues, distinguishing confirmed exposure from false positives or findings that require additional investigation.

• Assess vulnerabilities using severity, exploitability, system exposure, asset criticality, available mitigations, and potential business impact.

• Maintain vulnerability registers and remediation records, including affected assets, severity, responsible owners, target dates, and current status.

• Coordinate with infrastructure and cloud engineering teams to support timely patching, configuration hardening, and remediation of identified weaknesses.

• Monitor remediation progress and verify that completed corrective actions have addressed the original security finding.

• Investigate suspicious infrastructure activity, including unusual authentication events, unexpected privilege changes, abnormal network connections, and potentially unauthorised access.

• Assist with security incident triage by gathering relevant evidence, analysing event timelines, identifying affected assets, and escalating significant findings.

• Review configuration baselines for operating systems, cloud services, network controls, and other infrastructure components to identify deviations from approved standards.

• Support security monitoring improvements by refining alert rules, documenting detection logic, and identifying gaps in event visibility.

• Collaborate with security engineers to improve the coverage and effectiveness of vulnerability scanners, endpoint protection tools, cloud security monitoring, and other security platforms.

• Help assess external exposure by reviewing approved asset inventories, service configurations, network access controls, and internet-facing infrastructure.

• Support periodic security reviews, internal audits, and compliance assessments by maintaining accurate records of findings, remediation evidence, and relevant control activities.

• Prepare reports covering vulnerability trends, overdue remediation, recurring configuration weaknesses, incident patterns, and changes in infrastructure risk.

• Maintain documentation for investigation procedures, vulnerability handling, escalation requirements, and routine security monitoring activities.

• Contribute to security awareness initiatives by explaining recurring infrastructure weaknesses and recommending practical prevention measures.

• Monitor relevant security advisories and vulnerability disclosures to identify potential exposure within the organisation’s technology environment.

• Recommend improvements to vulnerability management processes, asset visibility, security monitoring coverage, and coordination between security and infrastructure teams.

Requirements and Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Networking, or a related field, or equivalent practical experience.

• Professional experience in infrastructure security, security operations, vulnerability management, systems administration, or a related technical discipline.

• Understanding of operating system security, network protocols, access controls, patch management, and infrastructure configuration.

• Familiarity with vulnerability assessment tools such as Nessus, Qualys, OpenVAS, or comparable platforms.

• Experience reviewing security logs and alerts using SIEM platforms or other monitoring technologies.

• Understanding of common infrastructure vulnerabilities, insecure configurations, exposed services, privilege escalation risks, and credential-related threats.

• Familiarity with cloud infrastructure security and the management of risks affecting virtual machines, storage, network resources, and cloud identities.

• Ability to assess vulnerability severity and explain why a finding requires immediate action, planned remediation, further investigation, or an alternative mitigation.

• Experience documenting security findings, coordinating remediation, and tracking corrective actions across technical teams.

• Familiarity with security frameworks and hardening guidance such as CIS Benchmarks, NIST guidance, or ISO 27001-related controls is beneficial.

• Strong analytical thinking, attention to detail, and the ability to manage multiple findings and investigations simultaneously.

• Clear written and verbal communication skills, including the ability to explain technical security issues to infrastructure owners and non-specialist stakeholders.

• Understanding of incident response procedures, evidence handling, escalation protocols, and the importance of accurate records.

• Relevant certifications such as Security+, CySA+, SSCP, or comparable credentials are advantageous.

• Previous experience in fintech, banking, payment services, or another environment requiring strong infrastructure security controls is an advantage.

Benefits

• Remote working arrangements within Estonia, subject to the organisation’s employment policies.

• Opportunity to contribute directly to vulnerability reduction and infrastructure security across financial technology services.

• Collaboration with security operations, cloud engineering, infrastructure, and application security professionals.

• Opportunities to develop expertise in vulnerability management, security monitoring, cloud protection, and incident investigation.

• Access to professional development, relevant technical training, and certification opportunities.

• A working environment that values methodical investigations, timely remediation, documented controls, and continuous improvement.

• The opportunity to help strengthen technical visibility, reduce avoidable exposure, and improve the organisation’s overall security posture.

Application Instructions

Candidates should submit an up-to-date CV outlining their infrastructure security experience, vulnerability assessment tools, monitoring technologies, and relevant technical qualifications. Applicants are encouraged to describe a vulnerability management initiative or security investigation they supported, including how findings were validated, prioritised, communicated, and resolved.

Applications should be submitted through the relevant recruitment platform or official hiring channel associated with the vacancy. Shortlisted candidates may be invited to complete a technical exercise or interview covering vulnerability triage, log analysis, infrastructure hardening, security incident investigation, and remediation prioritisation.

Are you interested in this position?

Apply by clicking on the “Apply Now” Button below!

#JobsHubEstonia #GlobalRecruitment
#CareerOpportunities #HiringNow
#JobSeekersNetwork #EstoniaJobs
#RecruitmentServices #EmploymentPortal.