Information security engineer in Konditerskaya korporaciya «ROShEN»

Main responsibilities:

• Security system monitoring
• Dissemination of policies of security
• Participation in the design of security systems
• Control of updating information systems - Patch Management
• Planning of works to eliminate vulnerabilities
• Security Systems Change Management
• Development, implementation and maintenance of security policies, procedures and standards in accordance with ISO 27001
• Access Management (IAM), Rights Auditing, Implementation of Access Roles (RBAC) and Multi-Factor Authentication (MFA)
• Participation in internal audits, compliance assessment and reporting
• Conducting trainings, phishing campaigns, developing staff awareness.

Requirements to of the candidate:

• Higher education (computer technology, computer engineering, security of information systems)
• 3 years of work experience in a similar position
• Skills in working with vulnerability detection tools
• Knowledge of requirements of security standards: ISO/IEC 27001/27002/27005, SOC 2, NIST CSF, GDPR, DPA
• Experience in security monitoring, incident response, response scripting
• Understanding of cryptography: PKI, SSL/TLS, VPN, encryption types
• Experience with ESET, Checkpoint Harmony, Windows Defender, XDR, EDR
• Experience in maintenance of SIEM/DLP security systems.

 Personal qualities:

• Communication skills
• Attention to details
• Ability to work in a team.

We offer:

• Competitive salary
• Official employment
• Medical insurance after probation term
• Delicious lunches at the expense of the company
• Working in a comfortable office (open space) from 09:00 to 18:00, reduced working hourson Friday until 17:00.