Chief specialist of the IT Security division

We are looking for a specialist with at least 3 years of experience in information security who has worked with SIEM, EDR and firewall systems and knows the ISO/IEC 27001 and NIST CSF frameworks.

Vəzifə öhdəlikləri

• Take part in implementing information security policies
• Carry out information security risk assessments
• Develop risk mitigation measures
• Manage firewall, VPN, IDS/IPS and other security systems
• Monitor network security
• Monitor and analyse security events in SIEM systems
• Take part in investigating security incidents
• Respond promptly to cybersecurity incidents
• Manage endpoint security solutions
• Control user access rights
• Oversee the application of Active Directory security policies
• Organise privileged account management
• Organise the implementation of MFA and other authentication mechanisms
• Organise security audits of information systems
• Take part in vulnerability assessments and security testing
• Track remediation of penetration test findings
• Prepare internal information security procedures
• Take part in cybersecurity awareness activities for staff
• Take part in the security assessment of new information systems
• Take part in preparing Business Continuity and Disaster Recovery plans
• Take part in preparing regulatory documents on information security
• Monitor cybersecurity events, analyse incidents and carry out response measures
• Analyse data from SIEM, EDR, firewall, IDS/IPS, PAM and other security platforms
• Prepare information security reports and analytical briefs

Requirements

• Higher education (information technology, information security or a related field)
• At least 3 years of experience in information security
• Knowledge of Windows Server, Active Directory, Linux, TCP/IP, VPN, firewalls, SIEM, EDR, PAM and IAM
• Knowledge of ISO/IEC 27001, NIST CSF, CIS Controls and OWASP Top 10
• Knowledge of current cyber threats, security architecture, identity and access management, security monitoring, vulnerability management and security operations