What you will be doing
- Building and supporting the Vulnerability Management process within the company;
- Operating and developing VM processes using SOAR platforms Security Vision (VM module);
- Integrating the VM system with SOC, SIEM, CMDB, and other information security systems;
- Analyzing and verifying vulnerability scan results, prioritizing risks;
- Controlling vulnerability remediation (remediation, mitigation);
- Configuring automated response scenarios (playbooks);
- Preparing vulnerability reports for Information Security, IT, and management;
- Interacting with IT departments and system owners;
- Participating in incident investigations with the Information Security Monitoring Center related to vulnerability exploitation;
- Developing VM methodology and internal regulations.
What we expect from you
- At least 2 years of experience in information security;
- Experience in vulnerability verification;
- Experience managing projects for vulnerability remediation and mitigation;
- Experience implementing or developing VM processes;
- Understanding of the vulnerability lifecycle;
- Automation experience (playbooks, workflows);
- Experience with the Russian cybersecurity stack;
- Ability to interact with IT and business departments;
- Knowledge of the following software: Kali Linux (Metasploit Framework, nmap, Wireshark, BloodHound, etc.), Vulnerability Scanners (Nessus, OpenVAS, PT VM, etc.), SOAR (R-Vision, Security Vision), Burp Suite (OwaspZap), SIEM, CMDB;
- Desirable certifications: VM/SOAR Administration, VM / SOC / SOAR certification.
What we offer
Official employment with all social guarantees
Opportunity for hybrid work format
Comfortable office within walking distance of Voykovskaya metro station and Baltiyskaya MCC, with meal compensation
Voluntary Medical Insurance (DMS) with telemedicine and dentistry from the first day of employment; preferential enrollment for relatives
Attractive salary package with access to a large ecosystem of services
External training and participation in conferences, meetups, hackathons, and practice exchange
Travel insurance policy and preferential insurance programs
Casual dress code and no bureaucracy
