Chitai-Technology is an accredited IT company. We are building the most technologically advanced chain of bookstores in Russia.
We are now expanding our team and looking for a Lead Information Security Engineer.
Initially, our colleague will focus on the retail chain infrastructure – over 600 stores: monitoring, access audits, hardening, incident investigation. For those who want to grow further, we offer the opportunity to advance to the next level: information security in development and e-commerce infrastructure – websites and mobile applications – which involves AppSec, pipeline security, and working closely with product teams =)
Responsibilities:
- Support and development of SIEM systems;
- Analysis of information security events and incident investigation;
- Conducting audits of Active Directory and privileged accounts;
- Monitoring access rights of administrators, developers, DevOps engineers, and contractors;
- Development of access management processes and participation in the implementation of IAM/IDM/PAM solutions;
- Conducting infrastructure security audits;
- Preparing hardening requirements for servers and infrastructure services;
- Analyzing vulnerabilities and controlling the implementation of measures for their elimination;
- Interaction with infrastructure, DevOps, development teams, and contractors;
- Participation in the implementation of new information security tools.
What is important to us:
- From 3 years of experience as a system administrator, DevOps engineer, infrastructure engineer, or information security engineer;
- Practical experience in implementing and supporting information security systems;
- Confident knowledge of Linux and Windows Server;
- Experience with Active Directory;
- Understanding of network technologies (TCP/IP, DNS, VPN, Firewall, VLAN);
- Experience in log analysis and incident investigation;
- Understanding of access management principles and privileged accounts;
- Automation skills (Bash, PowerShell, Python).
We offer:
- Official employment from the first working day in an accredited IT company;
- Work according to Agile with clear and understandable tasks;
- Work format: soft hybrid, during the probation period, it would be great to see colleagues 1-2 times a week in the office, after that – by agreement;
- Flexible start to the workday (the workday can start between 8 and 11);
- Voluntary medical insurance on preferential terms;
- Payment for training, courses, and conference tickets;
- Free electronic library;
- Corporate discounts for fitness and foreign language learning;
- 30% discount in our chain's stores.
