Information Security Engineer

з/п не указана

Вакансия в архиве

Работодатель, вероятно, уже нашел нужного кандидата и больше не принимает отклики на эту вакансию

Показать описание вакансии

Требуемый опыт работы: 3–6 лет

Полная занятость, полный день

Build your success with Veeam!

Veeam is the global leader in intelligent data management for the Hyper-Available Enterprise. Founded in 2006, today we have more than 300K customers worldwide, 55K channel partners, Cisco, HPE, and NetApp as exclusive resellers and nearly 19,000 cloud and service providers. Headquartered in Baar, Switzerland, Veeam has offices in more than 30 countries. Veeam Software is the leader in software solutions for VMware virtualization systems management. Veeam is an international company with global headquarters in Baar, Switzerland, regional headquarters for EMEA in Paris, for the Americas in Columbus, Ohio and for Asia Pacific in Sydney.

​​​​​​Responsibilities

  • Advanced level of security investigation on following areas: Application Security, Cloud Security, Data Security, Network Security and Perimeter Security
  • Malware analysis, sandboxing and reverse engineering
  • Forensic lab management experience, including infrastructure (hardware and software), processes, procedures, and supporting documentation based on industry best practices
  • Gather data and drill down to root cause analysis, ability to dedicatedly recommend effective courses of containment and remediation
  • Acquire and analyze digital evidence from a variety of workstation, server and mobile platforms
  • Generate high quality forensic examination reports to communicate findings clearly and concisely to technical and non-technical business unit managers
  • Develop and document digital forensic policies and processes
  • Collaborate with team members, leadership and stakeholders, including Legal, HR, R&D and IT
  • Keep abreast of emerging digital forensic trends and tools
  • Develop and suggest improvements to current information security policies, solutions, practices and procedures
  • Develop incident escalation processes, and constantly seek to improve existing processes
  • Participate in Information Security initiatives and projects

Basic Qualifications

  • Strong knowledge of industry standard security technologies
  • Encryption/cryptography protocols and best practices
  • Routing protocols and routing table configuration assignment
  • Authentication, authorization and directory services
  • Ability to develop specific proactive procedures for detection of security breaches and identifying security risks via architecture and design review as well as baseline accepted security standards
  • Experience in operating system, application, and network penetration testing and vulnerability assessment
  • Experience in liaising with system and network administrators to help remediate the impact of the identified risks and vulnerabilities at the platform level
  • Conceptual, analytical and innovative problem-solving and evaluative skills, an ability to conduct independent research and analysis in the event of a security breach, identifying issues, formulating options, proactively closing the security loop-holes, and making conclusions and recommendations
  • Knowledge of security controls for network, application and operating systems
  • Strong knowledge and work experience with logical access controls to ensure confidentiality, integrity and assurance of proprietary information
  • Interpersonal skills; including the ability to work effectively in a team environment

Competencies and technologies

  • Hardware, Network, Application and Policy Auditing
  • Risk Assessment/Risk Mitigation
  • HIDS, NIDS, Firewalls, Networking, Application, Data, Cloud and Perimeter Security Fundamentals and Best Practices
  • Security Incident Handling/Response and Risk Management
  • Digital forensics
  • Proper Evidence Handling and Integrity Best Practices
  • Knowledge of Viruses, Malware, Spyware, Trojans, etc.
  • Log File Analysis and Alerting
  • Designing, Engineering and Review of Secure Architectures
  • IDS/IPS, SIEM, Web Content Filtering/web proxies, AV/FDE/RME, IAM, MDM, Firewalls, DLP, Application Auditing, Vulnerability Scanning
  • Workforce Information Security Awareness Education (Creation of Content/Presentations – Delivery of same)
  • Reviews/updates Information Security and Information Services policies
  • Broad understanding of multiple forensic platforms and tools

Would be a great plus

  • Certified Forensic Security Responder (CFSR)
  • SANS Certifications (GCFE, GCFA, GNFA, GREM)
  • CISSP, CEH

We offer

  • Salary average or higher the market based on your skills and expertise
  • The modern, energetic, international, working environment in a team of engaged and loyal professionals
  • Opportunities for professional growth and career promotion
  • Professional training and education: unlimited access to e-library, professional courses and conferences, English classes
  • Flexible working schedule and opportunity to work remotely from time to time if you need it
  • Employment according to the Labor Code of the Russian Federation (all payments are fully "white" + 28-Day annual leave, etc)
  • Active corporate life: release pizzas, NY and Company birthday parties. quarter team-building activities
  • Corporate bonus program (you do not have to choose, you will get all of them):
    • Sports / fitness compensation
    • Extended medical insurance policy including dental services
    • Extra payments to support important personal events

Адрес

Площадь Ленина, Санкт-Петербург, Кондратьевский проспект, 15
Показать на карте
­

Вакансия опубликована 12 августа 2019 в Санкт-Петербурге

Написать сопроводительное письмоПисьмо отправлено

Сопроводительное письмо к отклику