Lead Security Engineer

Title: Lead Security Engineer Company: Bidzaar Location: Moscow Experience: 3 to 6 years

A Little About Us:

Bidzaar is a new type of commercial electronic trading platform (B2B SaaS) designed to automate the procurement of private companies.

Bidzaar helps companies optimize costs through transparent tenders and supplier interactions. We conduct over 3,000 tenders monthly with a total value exceeding 100 billion ₽. Our clients include over 990 major companies, such as: OZON, beeline, Detsky Mir, Baltika Brewery Company, Rusagro Group, Vkusno – i tochka, MegaFon, Shokoladnitsa, Azbuka Vkusa, RIIV GOSH, Aston Agroholding, Gloria Jeans, INVITRO, Vseinstrumenti.ru, Citilink, Alfa-Bank, CDEK, ROLF, Akron Holding, X5, and others, including 52 companies from the Forbes-200 list.

Our mission: "We transform economic relations for the benefit of every company and society as a whole."

We are a technology-driven, dynamic, and growing team. At Bidzaar, initiative, direct communication, and a focus on business results rather than processes are valued. We work at a high pace, are open to experiments, and respect people.

Due to company growth, we are looking for a Lead Security Engineer.

What you will be doing:

• Implementing and developing a multi-factor authentication system;
• Organizing hardening of IT assets and monitoring compliance with security policies;
• Optimizing the performance of the antivirus protection system;
• Building a multi-level account management system.

Our expectations from the candidate.

Key Requirements:

• Higher education in information security or IT;
• 5+ years of experience in information security and/or system administration with a focus on security.

Technical Skills:

• Architectural thinking in the area of network security and network protection tools;
• Technical expertise in organizing IT infrastructure hardening;
• Experience with various classes of information protection tools (antivirus, NGFW, vulnerability scanners, PAM, WAF, etc.).

Management Skills:

• Experience building information security processes "from scratch" or fundamentally restructuring existing ones;
• Willingness to hire, train, and manage;
• Ability to build communication with developers, IT and security engineers, administrators, and top management;
• Ability to justify proposed solutions based on business needs using a risk-oriented approach;
• System thinking, analytical approach, independence.

Will be a plus:

• Practical experience with Kaspersky products (EPP, EDR, KSC);
• Experience implementing complex protection systems (NTA, SIEM, IDM, etc.);
• Experience in a DevOps environment, working with containerization and orchestration (Docker, Kubernetes);
• Possession of certificates (CISSP, OSCP, vendor certificates, etc.)

What we offer:

• Official employment according to the Labor Code from day one, competitive salary (discussed individually);
• Work in an accredited IT company;
• Smooth onboarding with support from the training department, necessary materials, and feedback;
• 70% reimbursement for any work-related education (after the probation period);
• Voluntary medical insurance with dental coverage after the probation period;
• Interesting life outside of work tasks – we gather to watch movies, play board games or quizzes, sing karaoke, go outdoors, and simply have a good time together with colleagues.

APPLICATIONS WITH A COVER LETTER ARE REVIEWED WITHOUT DELAY!

Skills: Information security, IT infrastructure, Security testing, Lead Security Engineer, Kaspersky, CISSP, antivirus software, WAF, NGFW, IDM, Active Directory, Linux Server Administration, Security Architecture, Information Security Audit, Server Administration, Personal Data Protection