Senior Security Analyst - Platform & Infrastructure

What if, in your next adventure, you were surrounded by people who, like you, look for an unlimited playground to explore, share, and test, would you care to hear more? You've opened the right door! As an R&D team, making sure your ideas are heard and encouraged is what we strive to do!

What You'll Do:

As a Security Analyst in the “Security Blue - Platform & Infrastructure” team, you will be at the forefront of our efforts to protect our extensive infrastructure, consisting of over 40,000 servers and a diverse technology stack spanning hybrid cloud and on-premise environments. Your role will be a blend of reactive and proactive security measures to ensure the safety and integrity of our systems.

Key Responsibilities:

• Vulnerability and Incident Management:

  • Engage in threat intelligence activities to detect new patterns and attacks.

  • Stay updated with CVEs (Common Vulnerabilities and Exposures) that could impact our infrastructure, and trigger response plans when necessary.

  • Respond to security incidents, coordinating responses with multiple teams, handling reporting, and managing escalations.

• Proactive Security Projects:

  • Lead hardening efforts across our infrastructure and platforms.

  • Support / review Platform & Infrastructure design with a security focus

  • Develop and implement strategies and solutions to prevent incidents and vulnerabilities from impacting our systems.

• Detection Engineering:

  • Craft new detection mechanisms to identify anomalies and potential threats.

  • Utilize our SIEM system built on ElasticSearch for monitoring and analysis.

• Automation and Scripting:

  • Leverage coding skills to build automation tools and scripts to enhance security operations.

Collaboration:

• Work closely with teams managing the infrastructure and platform.

• Maintain client/provider relationships with the Security Yellow team to ensure the right tools are in place.

• Support the compliance team in their mission, providing security insights and assistance.

Who You Are:

Educational Background:

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent practical experience).
  

Skills and Experience:

• Experience in threat intelligence, incident response, and vulnerability management.

• Familiarity with SIEM systems, particularly ElasticSearch.

• Coding and scripting capabilities for automation (languages such as Python, Go, Bash, etc.).

• Strong analytical skills to assess and respond to security threats.

• Effective verbal and written communication skills for collaboration and reporting.
  

Soft Skills:

• Ability to influence without authority to drive security best practices.

• Excellent organizational skills to manage multiple tasks and incidents effectively.

• Perseverance in continuously improving security measures and tackling complex challenges.
  

Team Structure and Reporting:

• The security group consists of approximately 20 members, divided in 3 teams: a compliance team, a yellow and a Blue team.

• The Blue team, focused on security operations, is divided into three specialized pods: Application Security, Digital Workplace, and Platform & Infrastructure.

• This position will report to the Devlead.

• Collaborate closely with cross-functional teams managing infrastructure and platforms, and support the compliance team in their security-related tasks.

We acknowledge that many candidates may not meet every single role requirement listed above. If your experience looks a little different from our requirements but you believe that you can still bring value to the role, we’d love to see your application!​

Who We Are:

Criteo is the global commerce media company that enables marketers and media owners to deliver richer consumer experiences and drive better commerce outcomes through its industry leading Commerce Media Platform.

At Criteo, our culture is as unique as it is diverse. From our offices around the world or from home, our incredible team of 3,600 Criteos collaborates to develop an open and inclusive environment. We seek to ensure that all of our workers are treated equally, and we do not tolerate discrimination based on race, gender identity, gender, sexual orientation, color, national origin, religion, age, disability, political opinion, pregnancy, migrant status, ethnicity, marital or family status, or other protected characteristics at all stages of the employment lifecycle including how we attract and recruit, through promotions, pay decisions, benefits, career progression and development. We aim to ensure employment decisions and actions are based solely on business-related considerations and not on protected characteristics. As outlined in our Code of Business Conduct and Ethics, we strictly forbid any kind of discrimination, harassment, mistreatment or bullying towards colleagues, clients, suppliers, stakeholders, shareholders, or any visitors of Criteo. All of this supports us in our mission to power the world’s marketers with trusted and impactful advertising encouraging discovery, innovation and choice in an open internet.

Why Join Us:

At Criteo, we take pride in being a caring culture and are committed to providing our employees with valuable benefits that support their physical, emotional and financial wellbeing, their interests and the important life events. We aim to create a place where people can grow and learn from each other while having a meaningful impact. We want to set you up for success in your job, and an important part of that includes comprehensive perks & benefits. Benefits may vary depending on the country where you work and the nature of your employment with Criteo. When determining compensation, we carefully consider a wide range of job-related factors, including experience, knowledge, skills, education, and location. These factors can cause your compensation to vary.