Information Security Engineer

Area: support and improve existing IT Security controls and systems to protect critical IT assets and sensitive corporate data; implement new processes and projects to enhance overall IT/Information security level of the Company with OS and database, end-user security.

Functional description:

· Support of existing IS infrastructure (Privilege access management, Data leakage prevention, malware protection, MDM) and adjust/improve it for specified needs (updates, modifications, best practices etc.);

· Monitoring of IS incidents. Processing SOC notifications. Develop and maintain list of critical events for monitoring. Collect information from different sources and perform security investigation.

· Improve existing and develop new policy and settings for entrusted systems;

· Develop and maintain IT/Information security policies, procedures and instructions related to IS monitoring.

· Act as a Security Analyst in projects to conduct IS risk analysis and design countermeasures to minimize the risks related to sensitive data leakage and unauthorized modification

· Control compliance of processes and controls to Security and international standards requirements, introduced in the company, such as ISO 27001, PCI DSS and SOX.

· Participation in Information Security Awareness of the Company. Consult employees on the matter of Information and IT Security. Run campaigns to verify and assess the level of employees’ information security awareness.

· Act as a Project Manager in assigned Information Security projects.

Requirements:

· Education: University Degree in IT/Information Security or any other IT related area

· Experience: from 2 to 5 years

· Language skills: English (intermediate), Ukrainian – fluent.

Essential professional experience:

· Experience with administration and support of Malware protection software (AV, EDR, XDR), Data Leakage Prevention infrastructure (cloud and on-premise), Privilege Access Management, MDM, etc;

· Experience with MS 365 cloud security and infrastructure services;

· Experience with scripting and automation using any development or scripting languages like PowerShell, Bash, Python, Ruby, Go;

· Practical knowledge of Information Security Management frameworks;

· Good knowledge and working experience of Information Security standards and best practices: ISO270xx, CobiT, ITIL standards;

· Knowledge and experience in designing and applying security controls for different technologies;

· Good knowledge in IP networking and overall internal IT processes;

· Strong experience at logs analysis and troubleshooting;

· Good communication and excellent reporting skills;

· Ability to dive into details and study new knowledge.

Would be a plus:

· System administrator (Windows, MacOS, Unix) or incident responder background;

· Experience with log collection, parsing and enrichment with Elastic beats, logstash, syslog-ng, rsyslog;

· Understanding of DB architectures such as Oracle (Exadata), MySQL, MSSQL and its logging and security configuration aspects;

· SS7/GSM (2g, 3g, 4g LTE, 5g) networking familiarity;

· Genuine desire to work and grow as cybersecurity practitioner.