F6 is a Russian developer of technologies for combating cybercrime, a provider of solutions for detecting and preventing cyberattacks, fraud detection, high-tech crime investigation, and protecting intellectual property online.
Location: Moscow
Salary: 150,000 — 300,000 RUB/month net
Responsibilities
- conducting security audits of internal and external networks.
- analyzing configurations and searching for vulnerabilities in the infrastructure: OS, services, domain, cloud, and network devices.
- exploiting found vulnerabilities and building attack chains.
- conducting security analysis of corporate environments: AD/LDAP/Kerberos, VPN and remote access, Kubernetes clusters, and virtualization and containerization systems.
- performing infrastructure hardening: configuring secure OS Linux/Windows configurations, protecting administrative access, implementing network segmentation.
- participating in incident response: analyzing logs, investigating compromises, determining attack vectors, and preparing recommendations for remediation.
Requirements
- possess a higher technical education in information security.
- have a solid understanding of network interaction (TCP/IP, OSI, routing, NAT, VLAN, VPN, DNS, DHCP, etc.).
- understand OS architecture: Windows (services, registry, permissions, UAC), Linux (users, groups, PAM, capabilities, systemd).
- know how AD, Kerberos, and LDAP work.
- understand attacks: privilege escalation, lateral movement, credential dumping, persistence, exfiltration.
- have programming skills in Python/Go/Bash/PowerShell for automation.
- understand threats to infrastructure, OS, and networks, and can explain business risks.
- can write technical reports on found vulnerabilities and recommendations for their correction (in some cases, correct them yourself).
It would be great if you:
- understand Kubernetes architecture.
- have experience with cloud platforms.
- know how to work with SIEM/XDR.
- are familiar with Threat Intelligence.
- have participated in CTFs/Bug Bounties.
- have OSCP/CRTO/CRTP or equivalent certifications.
Conditions and Benefits
- flexible schedule.
- Voluntary Medical Insurance (DMS) including dentistry, home doctor visits, emergency hospitalization, and international travel insurance.
- regular internal meetups.
- fitness compensation, the opportunity to join our football and volleyball teams for which we rent sports grounds, and other interest-based communities — we run marathons together, go hiking, practice yoga.
