Posting Link:

Responsibilities:

• Utilization of cloud security platform services;
• Formation and implementation of secure-by-default settings for cloud services in use;
• Development of security baselines for all cloud services in use;
• Formation and control of cybersecurity requirements for the use of cloud services;
• Participation in the migration of company information systems to the cloud;
• Identification of potential attack vectors in cloud services;
• Creation of automated security configuration checks in the cloud;
• Interaction with cybersecurity teams responsible for overlay cybersecurity tools;
• Continuous improvement of the security of infrastructure hosted in the cloud;
• Acting as a customer for new cybersecurity features;
• Management of a team of department engineers (2-3).

Requirements:

• Experience with cloud platforms (AWS, Azure, GCP, Yandex) - from 3 years;
• Knowledge of authentication and authorization protocols OAuth 2.0, OIDC, SAML, etc.;
• Experience with IAM solutions (cloud providers or on-premise);
• User-level experience with Kubernetes and containerization.
• Knowledge and experience using Infrastructure as Code (Terraform, CloudFormation);
• Experience with CI/CD pipeline security;
• Understanding of OWASP Top 10;
• Understanding of REST/gRPC API architecture principles;
• Goal management, team management.

Technical Skills:

• Programming languages: Python, Go, Bash;
• Monitoring: Prometheus, Grafana, ELK Stack.

Desirable Skills:

• Certifications: AWS Security Specialty, CISSP, CCSP;
• Experience with compliance frameworks (ISO 27001, PCI DSS);
• Knowledge of threat modeling and risk assessment.
• Experience in DevSecOps.

What We Offer:

• Employment in accordance with the labor legislation of the Russian Federation;
• Competitive income level (salary + annual bonus);
• Voluntary medical insurance with dental care and the option to include children and relatives;
• Transparent motivation system that allows influencing income level;
• Work in a team of professionals;
• Participation in the creation of innovative products;
• Flexible start to the working day, Friday is a shortened working day;
• Office in the center of Moscow;
• Corporate mobile communication.