Security Analyst – Cloud Applications

Do you want to help secure the cloud platforms that keep critical infrastructure running worldwide?

We're looking for a Security Analyst to join our Cybersecurity team and take ownership of security for ComAp's cloud applications, including our WebSupervisor remote monitoring platform. Your mission will be to ensure our cloud services meet the latest cybersecurity standards and regulations, such as ISO/IEC 27001, IEC 62443-4-1 and NIS2, and to help us continuously strengthen WebSupervisor as a secure, cyber-resilient platform.

What will you do?

• Define and maintain security requirements and specifications for ComAp's cloud applications, including WebSupervisor
• Perform gap analysis against IEC 62443-4-1 and ISO/IEC 27001, identifying applicable requirements and documenting justifications
• Develop and maintain security context and threat models for cloud architectures and their integration with ComAp's OT and embedded ecosystem
• Evaluate cloud infrastructure and 3rd party components against the CVE database, analyze vulnerabilities, and propose mitigation strategies
• Respond to customer security questionnaires, certification requests, and audits
• Track compliance with legal obligations such as NIS2, GDPR and the EU Data Act
• Support ComAp's path toward globally recognized ISO/IEC 27017 certification
• Work with the development team to embed secure-by-design principles across the cloud application lifecycle

What should you know?

• Solid understanding of cloud security architecture (Azure/AWS or similar) and cloud-native threats
• Experience with security standards and regulations such as ISO/IEC 27001, IEC 62443, NIS2 or GDPR
• Familiarity with CVSS scoring and secure development lifecycle practices
• Experience with threat modeling and security requirement specification
• Ability to specify and design cloud applications
• Strong technical skills in English
• Advantage: experience with product/service security certifications, or knowledge of OT/industrial environments
• University degree in a technical field is an advantage
• Proactive attitude and independence are expected

What we offer:

• Become part of a global technology leader in power generation and energy control solutions.
• Strong focus on employee development through a wide range of internal and external learning opportunities
• A friendly and informal working environment where colleagues support each other, and enjoy spending time together outside of work
• Modern, dog-friendly offices in Prague's Holešovice with parking, relaxation areas, and a small gym
• Hybrid work model (possibility to work from home few days a week)

Additional benefits include:

• 5 weeks of vacation
• 3 "Me Days"
• 1 Charity Day
• Flexible working hours
• Meal vouchers
• Edenred cafeteria
• Language courses
• Annual bonuses

And finally — plenty of informal company events, breakfasts, and teambuilding activities!