Lead Information Security Specialist (DLP, Cryptographic Tools, Antivirus, Email Protection)

We are inviting an Information Security Specialist to join our team for the operation and control of information security tools: DLP, cryptographic tools (СКЗИ), antivirus protection, and email protection. The role involves a wide range of tasks – from setting policies and incident handling to maintaining registries, training employees, and preparing reports.

Project: Banking

• Support and maintenance of DLP: policies, exceptions, agents, gateways, sensors, integrations with AD/LDAP, SIEM, SOC, Service Desk
• Handling DLP alerts: analysis, classification, false positives, incident investigation, evidence collection, escalation
• Monitoring leak channels: email, web, cloud storage, messengers, USB, printing, clipboard, Express (chats, video conferencing, Smart Apps)
• Maintaining registries: DLP components, protected channels, agents, policies, exceptions, responsible individuals
• Individual accounting of cryptographic tools (СКЗИ): licenses, key carriers, Rutoken, smart cards, certificates, CryptoPro CSP, CryptoARM, CryptoPro GOST TLS, Validata, Signatura
• Issuance, return, replacement, blocking, and destruction of key carriers; maintaining logs
• Organizing the issuance, installation, blocking, revocation, and reissuance of certificates and keys
• Monitoring antivirus protection: KSC, KES, agent coverage, policies, exceptions, updates, incidents
• Monitoring email protection: KSMG, antispam, antivirus, antiphishing, SPF/DKIM/DMARC, quarantine, routing
• Monitoring the flow of Information Security events to SOC, escalating critical incidents
• Participating in Information Security incident investigations, coordinating root cause remediation, maintaining incident records
• Training employees on Information Security: program, training matrix, briefings, phishing campaigns, testing, training registry
• Preparing regular reports on DLP, cryptographic tools (СКЗИ), antivirus, email, and training
• Controlling access rights to security tool consoles: role-based access control, MFA, PAM, access review
• Controlling exceptions: justification, risk owner, validity period, review
• Participating in the approval of changes that weaken security
• Keeping operational documentation, instructions, and registries up-to-date

• Over 6 years of experience in information security (preferably more than 3 years in a bank or financial institution)
• Experience in building and deploying systems from scratch, migrating systems between network segments
• Experience with Linux, Python
• Practical experience operating DLP systems: policies, exceptions, agents, gateways, sensors, incidents
• Experience with cryptographic tools (СКЗИ): CryptoPro CSP, CryptoARM, CryptoPro GOST TLS, Rutoken, smart cards, certificates
• Experience administering or controlling Kaspersky Security Center, Kaspersky Endpoint Security
• Experience with Kaspersky Secure Mail Gateway or similar email gateways
• Knowledge of SPF, DKIM, DMARC
• Understanding of AD/LDAP, SIEM, SOC, Service Desk principles
• Knowledge of Federal Law 152-FZ, GOST R 57580.1, requirements of the Bank of Russia regarding Information Security and Personal Data Protection
• Understanding of banking and commercial secrets, rules for handling personal data
• Experience in handling and investigating Information Security incidents
• Experience maintaining registries, logs, and reports
• Experience conducting training and awareness-raising on Information Security
• Knowledge of role-based access control principles, least privilege, MFA, PAM
• High attention to detail, discipline, ability to work with documents

• Employment at EGAR, a stable and dynamically developing IT company;
• Work format: office, Moscow, Bolshaya Yakimanka St., 23;
• Work schedule: 9:00 to 18:00;
• Competitive salary, which we are ready to discuss during the interview;
• A full project team with clearly defined roles;
• Prompt resolution of organizational issues;
• Opportunities for professional growth (vertical or horizontal);
• Training opportunities (courses, certification);
• Bonuses through the referral program for successful recommendations;
• Maintaining work-life balance