Middle Information Security Analyst
|Требования:||Prevent, detect and respond to cyber threats to the Company's assets.|
Search and analyze weaknesses of software, hardware, networks.
Plan, implement and monitor security measures and controls.
Establish plans and controls to protect digital files and information systems against unauthorized access, modification and/or destruction.
Perform vulnerability testing, risk analyses and security assessments.
Conduct internal and external security audits where applicable.
Anticipate security alerts, incidents, disasters and reduce their likelihood.
Use security systems (e.g. SIEM, EDR, DLP, UEBA, IDS/IPS, vulnerability scanners, anti-virus and anti-malware, firewalls). Reduce false positives.
Perform threat hunting, incident investigation, malware analysis, forensic, penetration tests.
Analyze security breaches to determine their root cause.
Recommend, install and tune appropriate tools and countermeasures.
Define, implement and maintain corporate security policies.
Train fellow employees in security awareness and procedures.
Coordinate security plans / response with outside vendors.
Perform periodic security reporting (both: executive and technical).
|Квалификация:||At least 2+ years of experience|
Working experience with security systems (e.g. SIEM, EDR, DLP, UEBA, IDS/IPS, vulnerability scanners, anti-virus and anti-malware, firewalls).
computer networking, routing and switching, cloud computing.
Windows, UNIX and Linux operating systems.
Network protocols and packet analysis tools.
Understanding of digital forensics process, best practices and tools.
Understanding of low level programming languages (C / Assembler), script languages (Python / Bash), high level programming languages (Java / C#).
Knowledge of security frameworks / standards (e.g. ISO 27001, SOC2, NIST, HIPAA, PCI DSS, GDPR, ITIL, Cobit etc.).
Understanding of secure coding practices, ethical hacking, threat modeling, secure SDLC process.
Understanding of DR / BCP.
At least intermediate strong English level
|Контакты:||Contact person: Oksana Danyliv|
Contact phone: 380673711317