Information Security (IS) Specialist

operation of automated information protection tools of domestic production (AV, IPS/IDS, Firewall NGFW, IdM, СЗИ от НСД, Anti-Spam systems, Siem, EDR); management of typical IS incidents: monitoring IS events, response, analysis, investigation, development of corrective measures, reporting; participation in the development of regulatory documents for information security processes: regulations, methodologies, instructions; implementation of control over providing access to information systems.

Requirements

higher education in the field of information security; knowledge of the basics of legal aspects of information security (149-FZ, 152-FZ, 187-FZ; 127-PP, 98-FZ, 63-FZ, 152 FAPSI); knowledge of the basics of the regulatory and legal framework regulating information protection issues in information systems (FSTEC Orders №117, №21, №235, №239); understanding of IT infrastructure: server platforms, data backup systems, database management systems, principles of construction and segmentation of network infrastructure; knowledge of English at the level of reading technical literature; communication skills; experience in controlling the security of IT assets; in IS incident management; in identifying vulnerabilities of IT assets; in working with domestic technical information protection tools; in the construction and segmentation of network infrastructure; in participating in the implementation of information protection tools.

Higher education — specialist degree, master's degree; Experience: 3 years