Company: YADRO
Location: Moscow
Experience: 3 to 6 years
Responsibilities:
- Configuration and support of network security devices: NGFW, IPS/IDS, WAF, proxy servers, NAC.
- Design and control of network segmentation, development of firewall rules.
- Perimeter and internal segment protection, VPN and remote access systems management.
- Network traffic monitoring, anomaly and network attack detection.
- Access rule management: maintaining firewall rules, regular audit and cleanup of inactive permissions.
- DDoS attack protection implementation and control of network flows between security zones.
- Integration of network events with SIEM, participation in network incident analysis.
- Documentation development: segmentation schemes, rule change regulations, operational instructions.
What we expect from our future team member:
- Experience in operating information network security devices.
- In-depth knowledge of network technologies: TCP/IP stack, routing, switching, VLAN, NAT, DNS, TLS.
- Practical experience with NGFW (Check Point, Fortinet, UserGate, Continent, Ideco and similar) and intrusion detection systems.
- Experience in configuring and supporting WAF, understanding web vulnerabilities and the logic of blocking them at the traffic level.
- Experience in designing network segmentation, understanding Zero Trust and micro-segmentation approaches.
- Experience in configuring VPN solutions and organizing secure remote access, working with crypto gateways.
- Traffic analysis skills: Wireshark, tcpdump, working with NetFlow/IPFIX.
- Understanding of network attack vectors and MITRE ATT&CK techniques applicable to the network layer.
- Experience integrating network events with SIEM, ability to write and correct detection rules.
- Scripting and automation skills (Python, Ansible) for configuration management and rule auditing.
- Understanding of regulatory requirements for communication channel protection and the use of certified information security tools.
Additionally, we welcome:
- NAC implementation experience.
- Experience with DDoS protection solutions.
- Experience in organizing a sprawling firewall rule base.
- Vendor-specific certifications.
Skills: NGFW, FIrewall, TCP/IP, VLAN, Wireshark, SIEM, Python
