Company: MTS Web Services
Location: Moscow
Employment Type: Full-time
Qualification: Middle
Specialization: Information Security Architect
Skills: CI/CD, Kubernetes, Information Security.
RESPONSIBILITIES:
- coordinate and support teams on information security matters within the cluster;
- design secure architecture – develop protection systems for new and modernized products (modular, microservices, mobile applications, etc.);
- form information security requirements – create protection measures, private threat models, and other security requirements;
- prepare technical specifications for: development of protection functionality in information systems, integration of systems with information protection tools, and procurement of protection tools;
- control information security technical debt – monitor and prioritize work on eliminating weak points;
- participate in acceptance testing – verify compliance of implemented solutions with information security requirements;
- control information security and secure development processes – assess compliance of information systems with information security requirements, prepare conclusions and recommendations.
WHAT WE EXPECT:
- work experience as an Information Security architect/expert;
- knowledge of VDI (Virtual Desktop Infrastructure), MDM (Mobile Device Management) technologies;
- knowledge of attack vectors on web applications, IT infrastructure, virtualization and virtual environments, networks, and understanding of principles of attacks on information systems using vulnerabilities from OWASP Top 10;
- experience in software development, understanding of the main stages of software development, IS architecture;
- understanding of CI/CD principles, virtualization, containerization, and orchestration (Docker, Kubernetes, Gitlab, etc.);
- knowledge of regulatory legal acts in the field of information security, in particular Federal Laws (187-FZ, 152-FZ, etc.), Government Decrees, orders of FSTEC, FSB, 126-FZ. Knowledge of best practices and recommendations in the field of information security (ISO 27001, NIST, CIS);
- experience in building security systems (IS, KB) for industrial enterprises (including critical information infrastructure of the Russian Federation).
WHAT WE OFFER:
- Salary + annual bonus;
- Voluntary Medical Insurance program from the first month of work – this is 100% coverage of expenses in private clinics, including dentistry. You can insure close relatives at a 50% discount. For travel enthusiasts – insurance for trips abroad. There is also life insurance;
- On-site and online training at the Corporate University, with external providers, if it is beneficial for work, exchange of experience in internal professional communities, as well as access to an online library with useful books and periodicals;
- Paid days off for significant life events of an employee;
- Financial assistance in difficult life situations;
- Corporate mobile communication + internet, as well as a unified MTS Premium subscription (KION online cinema, MTS Music service, MTS Lines, etc.);
- Offers from partners for travel, entertainment, and sports activities;
- Opportunity to participate in volunteer programs: we organize charity fairs, educational projects for children, social project competitions, and environmental projects;
- Internal sports program "In Motion": races, marathons, tournaments in various sports, meditation and balance classes.
