A friendly, groundbreaking team is waiting to welcome an Information Security Analyst!
Responsibilities:
- Conducting (participating in conducting) pre-project surveys during the implementation of automation solutions, collecting and systematizing initial data;
- Developing (participating in the development of) reporting documentation based on the results of pre-project surveys;
- Collecting, verifying, and formalizing functional and technical requirements for the implemented solution, developing technical specifications/functional and technical requirements documents;
- Designing (participating in the design of) the implementation of functional requirements and the technical implementation of the solution;
- Interacting with implementation team engineers within the framework of practical implementation of formed requirements;
- Developing (adapting templates) project-specific, customer-specific project, operational, and organizational and administrative documentation for implemented solutions.
Requirements:
- Knowledge and understanding of Russian regulatory and legal framework in the field of Information Security ( Federal Law 152, Federal Law 187, and others, Government Decrees, FSTEC/FSB guiding documents);
- Practical work experience in projects for auditing/ensuring compliance with Information Security requirements ( Russian and foreign IS standards, departmental/industry regulatory and methodological documents, state regulator guiding documents);
- Basic knowledge of information system architectures;
- Basic knowledge of various classes/directions of Information Security solutions (SIEM, antivirus software, Firewalls, DLP, etc.);
- Knowledge and understanding of the purpose of IRP/SOAR, SGRC, VM, TIP class solutions;
- Basic knowledge in the field of network technologies and local network construction principles;
- Experience in developing project, operational, and organizational and administrative documentation for implemented solutions ( technical specifications, functional and technical requirements, explanatory notes, test programs and methodologies, user/administrator guides, regulations, instructions, etc.);
- Ability to analyze requirements from customer regulatory and methodological documentation and adapt them for documentation development;
- Experience in developing non-standard documents (survey reports, threat models, role models, DRP, test scenarios, etc.) is a plus;
- Knowledge of the main aspects of GOST 34 series, GOST R 59795-2021, and the ability to adapt them to the documentation being developed;
- Proficient user of Microsoft Word, Microsoft Visio;
- Fluent written and spoken language, ability to structure information;
- Good visual memory;
- Ability to think critically, work with large volumes of information, and switch between tasks;
- Attention to detail, responsibility, ability to work in a team.
We offer:
- High income, office-based work format;
- Work in an accredited IT company and defense industry enterprise;
- Extended annual leave - 31 days;
- Comprehensive VHI package with dentistry and planned and emergency hospitalization from the very beginning of employment, a policy for those traveling on vacation;
- Discounts on a wide range of goods and services, including fitness and foreign languages;
- Corporate library for reading e-books and audiobooks;
- Strong and experienced leaders, market leaders;
- Work in a young and passionate team;
- Comfortable office near Dynamo metro station;
- Flexible start time from 9-11 AM;
- Opportunities for professional and career growth.