Description

RESPONSIBILITIES:

• Risk Analysis and Mitigation: Conduct risk assessments, evaluate threats, and implement measures to reduce security risks.
• ISO/IEC 27001 Compliance: Implement, maintain, and support ISO/IEC 27001 certification and compliance.
• Security Audits and Infrastructure Protection:
• Manage change control, asset management, and licensing procedures.
• Conduct internal audits to identify weaknesses and vulnerabilities in IT systems and infrastructure.
• Implement security enhancements and address vulnerabilities.
• Security Solutions Deployment and Management:
• Deploy, monitor, and maintain security solutions such as firewalls, web proxies, IDS/IPS, VPN servers, NAC, SIEM, SFTP servers, and more.
• Evaluate and implement new cybersecurity solutions while updating existing ones.
• Consulting and Support: Advise IT personnel and other employees on information security-related issues.

REQUIREMENTS:

• Deep understanding of network protocols and architecture.
• Hands-on experience in implementing and maintaining security solutions such as NGFW, EDR, PAM, NAC, and SIEM.
• Strong expertise in administering server operating systems (Linux/Windows) and working with Nginx/HAProxy.
• Knowledge and understanding of international IT security standards, particularly ISO/IEC 27001, NIST, PCI DSS.
• Experience in developing cybersecurity documentation.
• Professional certifications are a plus (e.g., CCSA/CCSE, CCNA/CCNP Security, CompTIA Security+ or others). Additionally, experience in identifying and exploiting vulnerabilities in web and network applications is highly desirable.