Network Engineer / Cybersecurity

Responsibilities:

• Implementation, support, and development of software and hardware network security tools;
• Analysis of network infrastructure for vulnerabilities to assess compliance with security standards and development of measures for their elimination;
• Analysis of network traffic to form a minimal, necessary, and sufficient list of inter-network communication rules;
• Monitoring network traffic to detect and prevent attacks and unauthorized access;
• Providing/modifying network access upon request;
• Blocking public IP addresses and subnets upon request;
• Assessment of access management to network resources and user privileges;
• Support of the centralized network equipment configuration management service;
• Implementation and support of a service for network access protection based on the 802.1x standard;
• Support of the network equipment access management service via RADIUS and TACACS+ protocols;
• Vulnerability testing of network infrastructure and development of recommendations for improving network security;
• Interaction with the computer security incident response department to build effective security controls and test them;
• Forming requirements for monitoring the implementation of network security measures;
• Participation in network architecture design.

What we expect from our future team member:

• Proficient in Windows/Linux OS;
• Experience in administering Cisco, MikroTik network equipment;
• Knowledge of principles for working with group policies and AD-based infrastructure;
• Knowledge of principles for installing, configuring, and maintaining Firewalls, including NGFW (specifically CheckPoint);
• Knowledge of principles for working with VPN solutions (Cisco Secure Client, Open Connect);
• Knowledge of the basics of pentesting and forensics;
• Knowledge of network security principles when organizing a local network, considering remote access to IT infrastructure;
• Knowledge of the OSI model and main network protocols, principles of their operation;
• Knowledge of vulnerability management processes.

We will be happy to offer:

• Become part of a large, stable company that develops and manufactures high-tech equipment and devices, and annually increases its market share and financial performance;
• Work in a team of professionals, always ready to support and share experience;
• Hybrid/remote work format;
• Work schedule from 10:00 to 19:00 with flexible start and end of the working day;
• Competitive salary level;
• Employment according to the Labor Code of the Russian Federation from the first days of work.