Senior Vulnerability Management Expert

Company: Alfa-Bank
Location: Moscow, Russia
Employment: full-time
Required experience: 3–6 years

Innovation and breakthrough solutions are our specialty

Join the team of a Three-time Employer Rating Leader*

*According to HeadHunter for 2023–2025

Technological Excellence
Powerfully develop our in-house solutions

Legendary Products
Create cutting-edge fintech solutions

Best Digital Banking*
Build products used by millions

Prestigious Experience
Realize your ambitions and grow with Russia's largest** private bank

*According to Markswebb rating, 2024
**According to top-10 vbr.ru rating, January 2024

Your Responsibilities:

— Control and assess the security of the company's infrastructure
— Search for vulnerabilities in both the internal and external company perimeter using automated and manual methods (pentest)
— Assess and prioritize discovered vulnerabilities
— Write recommendations on vulnerability remediation methods, develop information security strategy
— Monitor information about information security threats from external sources (Telegram channels, thematic forums, vendor portals)
— Test new solutions for infrastructure security assessment
— Develop custom scripts for scanning critical vulnerabilities
— Analyze and optimize information security processes

What we expect from you:

— Experience in manual web vulnerability searching
— Experience with automated security analysis tools (Nessus, Qualys, MaxPatrol 8, RedCheck or Rapid7)
— Knowledge of OWASP Top 10
— Proficiency with Kali Linux tools (Metasploit, Burp Suite, Nuclei, etc.)
— Solid understanding of Windows/Linux operating systems (administrator level), network technologies, infrastructure services (Active Directory, DNS, DHCP, Terminal Services, etc.)
— Understanding of information security risks and potential data leakage channels
— Knowledge of network, protocol, and OS security

Will be an advantage:

— Participation in Bug Bounty programs
— Experience with scripting languages (PowerShell, Python, or others)
— Experience with cloud providers

What we offer in return:

— Stable and transparent income: salary discussed after interview + quarterly bonus based on KPI results
— Flexible work schedule: plan your time as it suits you and your team
— Remote or hybrid work format, cozy IT hubs in Moscow and St. Petersburg, seasonal co-working space in Sochi
— Complex and interesting tasks, modern technology stack
— Care for your health: Voluntary Medical Insurance (DMS) from the first day of employment, including dentistry, service in the best clinics in the city, insurance, and compensation for 10 days of sick leave
— Access to free corporate libraries Alpina Digital, MyBook, and business publications
— Exclusive offers for employees: own gyms (Moscow, St. Petersburg, Yekaterinburg), as well as discounts on services from travel agencies, food products, restaurants, bars, and shops

The best bank* for the smart and free

*According to Banki.ru, 2023

*Welcome pack — a set for a new employee, presented on the first day

Joint Stock Company Alfa-Bank. License No. 1326 dated 01/16/2015