Security Engineer

About Piano

Piano's Digital Revenue Optimization solution helps digital services grow revenue by better understanding and influencing their customers' behavior. Piano unifies analytics, segmentation, and commercial personalization in one AI-driven application, enabling sites and apps to efficiently maximize the value of every uservisit. Headquartered in Amsterdam with offices in the Americas, Europe, and Asia-Pacific, Piano serves a global client base including the BBC, Deutsche Telekom, Nikkei, AXAand the Wall Street Journal.

Role Overview

As the Security Engineer, you will be part of the security team and collaborate withdevelopment and operations teams to ensure the seamless and secure delivery ofapplications and services. Security Analyst reports to Chief Information Security Officer

and cooperates with Security engineer.

Responsibilities:

• Monitoring and Analysis: Monitor security systems, logs, and alerts to detect and respond to fraudulent acitivities, security events,and security incidents in a timely manner. Conduct analysis of security events and incidents to identify trends, threats, and vulnerabilities.
• Vulnerability Management: Assistin vulnerability assessments and penetration testingactivities. Identifyand prioritize security vulnerabilities and work with relevant teams to remediate them.
• Security Tools Management: Assistin the administration and maintenance of security tools used by Piano such as intrusion detection/prevention systems, firewalls, endpoint protection, and security information and event management (SIEM) systems.
• Incident Response: Participatein incident response activities, including investigation, containment, and resolution of security incidents. Document incident response procedures and lessons learned for continuous improvement.
• Security Awareness: Support security awareness initiatives by creating and delivering training materials, conducting security awareness campaigns, and promotingbest practices among staff members.
• Compliance and Policy Adherence: Assist in ensuring compliance with relevant regulations, standards, and policies (e.g., GDPR, HIPAA, ISO 27001, PCI DSS). Contribute to the development and maintenance of security policies, proceduresand guidelines.
• Security Projects: Collaborate with cross-functional teams on security-related projects and initiatives, such as security infrastructure upgrades, risk assessments, and security audits.
• Support of Secure software development: Maintainsecurity controls throughout the software development lifecycle according to various secure coding practices (such as OWASP) to identifyand mitigate security risks. Integrate security tools and processes into the CI/CD pipeline to ensure automatedsecurity testing and validation. Identifyand recommend fixes for security issues in the codebase. Work with other engineers to fix other vulnerabilitiesin the application layer.
• Continuous improvement: Automate security processes to enhance efficiency and reduce manual intervention, including vulnerability scanning, configuration management, and incident response.

Requirements:

• Bachelor's degree in computer science, Information Security, or relatedfield.

• Experience with security tools such as vulnerability scanners (Shodan.io, Nessus, DefectDojo), IDS/IPS, and code analysis tools (SonarQube).

• Strong scripting and automation skills (e.g., Python, Bash, PowerShell)

Perks at Piano:

• Multisport card

• Lunch tickets

• Paid Sick days (3 days per half-year)

• 2 extra vacation days/year

• Possibility to work from home several days a week

• Ongoing career guidance and mentoring

• Introductory training and self-learning

• Refer-a-Friend - get a bonus in the employee referral program

Applicants must have authorization to work in this jurisdiction without sponsorship from Piano.