Cybersecurity Engineer

Requirements:

• 3+ years in IT security and compliance
• Practice-based knowledge of security management frameworks, such as ISO 27k series, GDPR, SOC2 etc.
• Knowledge of technical implementation and system configuration (AWS, M365, GWS, vulnerability scanners, SIEM/EDR/MDM/DLP)
• Proven track record of IT security audits/projects implementation
• Ability to develop information security policies, setup ISMS and guidelines, implement CIS20 and derive security requirements from them;
• Understanding access modelling. Ability to develop access models and assess them. Understanding of segregation of duties
• Experience in IAM & SSO solutions. Understanding of purpose and approaches of IAM. Knowledge of key tasks: identify, authenticate, and authorize
• Good knowledge of risk management, its purpose, and approaches. Ability to evaluate risks and create a risks management plan
• Understanding OWASP Top 10. Ability to describe vulnerabilities, ways of exploitations, and fix methods
• Understanding and implementing vulnerability & patch management. Knowledge in vulnerability scanners. Ability to validate scan results and provide recommendations
• Ability to develop and conduct security trainings and workshops
• Good level of professional English
• Experience in Secure SDLC/DevSecOps would be a plus
• Good communication skills, responsible, initiative, self-organized, eager to learn

Responsibilities:

• Conduct security audits and consulting projects, create an action plan & practical roadmap based on the audit results
• Develop and enhance an information security management framework to ensure business sustainability
• Build and maintain compliance guidelines. Create policies and standards for IT security and compliance
• Conduct general IT security awareness training for the company staff
• Evaluate and manage corporate risks related to IT security
• Build and maintain application-specific threat models, explicitly apply security principles to design
• Conduct security configuration assessments of cloud systems.
• Participate in the corporate certification and compliance activities
• Design and implement security architecture and detailed cybersecurity designs together with IT and software development departments
• Prepare and document standard operating procedures and protocols
• Cooperation with Account Management, Sales & Marketing, Legal, Delivery and Clients for all security-related topics (audits, contractual compliance, reviews, risk assessments, etc.)
• Keeping up to date with developments in IT security standards and threats

What we offer:

• Training and career development programs
• Knowledge sharing sessions
• Branded souvenirs
• Internal training and workshop
• Comfortable workplace & office equipment
• Opportunities for self-realization and career growth
• 18 days of paid vacations & 5 days of paid sick leaves
• Quarterly Team building & corporate events (2 grand events per year)
• Guaranteed regular compensation review
• On-demand Knowledge Evaluation and promotion
• English language courses
• Medical insurance with pretty much good coverage for you to feel safe

About this position

Location

Office/Remote

Employment type

Full time

Department

Services

Got Questions? Let Us Help!

Lillia Aleksandrova

Recruitment Specialist

[email protected]