Specialist in the Response and Monitoring Center (quota for SVO)

Conduct monitoring of the information security status of companies within the area of responsibility, identification of information security threats; -Primary analysis of IS events for anomalies and violations; -Operational response to IS incidents, application of basic measures for their localization; -Proposal of ways to improve processes for detecting information security incidents, implementation of information security incident response procedures; -Create and maintain knowledge bases on information security incidents; -Participate in conducting primary expertise of information security incidents.

Requirements

English language at the level of reading technical documentation. Knowledge of domestic and major foreign norms and standards in the field of information security. Knowledge of vulnerabilities of used OS, DBMS and applications, network protocols and services used when carrying out attacks in IP networks. Knowledge of network construction concepts, telecommunication exchange protocols. Knowledge of modern technologies used for network protection; principles of ensuring security in IS, DBMS, main methods and means of information protection. Knowledge of the basics of cryptographic information protection. Knowledge of concepts of roles and authorities in ERP-level systems; principles of ensuring security in IS. Knowledge of the basics of computer incident investigation.

Higher education — Bachelor's degree; Experience: 1 year