Company: Aitubi
Location: Moscow
Employment: Full-time
About the company and team
Aitubi LLC is a system integrator with 16 years of experience in information and network security. We work with large and medium-sized businesses in Russia and abroad, including banks, industrial enterprises, and government structures. Our team values professionalism, lack of bureaucracy, and the opportunity for every employee to influence the outcome. We collaborate with leading equipment manufacturers and create reliable solutions for our clients.
Candidate Expectations
- Project Activities:
- Technical organization and leadership in preparing and conducting audits of Customers' existing designs, architectures, and infrastructures, including effective data collection, consolidation, and processing; confirming data accuracy and completeness; developing an inspection report with a list of requirements and recommendations;
- Development and full lifecycle design of architectural solutions and systems, including the development of complex solutions and systems architecture;
- Execution of all design stage phases:
- Analysis of existing and developed project documentation;
- Analysis of the results of the pre-project inspection conducted;
- Development and approval of the final specification;
- Development of Technical Requirements (TR) / Terms of Reference (ToR);
- Development of technical project documentation sections, including the description of technical solutions within the technical project documentation package (Explanatory note to the technical project);
- Development of work plans, administrative and technical description of work stages;
- Independent or joint development of working and operational documentation within the project team;
- Preliminary estimation of project labor costs;
- Performing the functions of the Chief Project Engineer:
- Architectural supervision;
- Technical project management (role in technological aspects of project management, from development to handover/acceptance);
- Close technical interaction with Customer specialists within the project;
- Development of project schedules in collaboration with the project manager;
- Project team management and resource allocation. Allocation and assignment of tasks to project team engineers and control of their execution;
- Monitoring project deadlines and budget expenditure;
- Support and technical leadership during the execution of audit, implementation, commissioning, and acceptance testing work by project team engineers;
- Participation in further project support and development (if necessary).
- Interaction with Customers:
- Active technical participation at various stages of pre-sales activities;
- Consulting on the selection of technical solutions, products, architecture, and their approval;
- Analysis and assessment of the security status within an organization, identification of information and technical resources subject to protection;
- Collection, analysis, and formalization of customer requirements, preparation of technical proposals, development and refinement of ToR, development and justification of technical solutions;
- Conducting technical presentations, demonstrating solutions.
- Interaction with the Commercial Department:
- Assistance in developing and approving specifications;
- Preparation of technical sections for commercial proposals;
- Consulting and support for managers on technologies within their areas.
- Daily work in the technical department:
- Collaboration with the commercial department on technical pre-sales;
- Teamwork on projects;
- Assessment of the prospects of new solutions;
- Studying and joint prototyping and staging of new products, new functionality, functional improvements in existing products; developing solutions and services based on them;
- Training and passing necessary exams;
- Comparison of various solutions in the information security market;
- Maintaining Wiki sections;
- Preparation and delivery of technical presentations for Customers and partners;
- Participation in marketing events (writing articles and participating in conferences as a speaker, maintaining project history on the corporate portal);
- Technical leadership, mentorship.
Requirements
- Experience, in-depth knowledge, and broad coverage of architectural, design, and instrumental (practical) expertise in the full range of protection technologies, practices, vendors, and the applied information security market across various business verticals (including, but not limited to: FW/NGFW, EDR, VPN, IPS, WAF, SMTP security, NAC, sandbox, AAA, MFA, PIM/PAM/PUM, Anti-DDoS, SIEM, DLP, MDM, cryptography);
- Excellent knowledge of designs, architectures, best practices, and fundamentals of building and operating applied information security solutions;
- Knowledge of design processes, project procedures, and canonical and industrial design technologies (a combination of design methodologies and tools, as well as methods and tools for organizing design (managing the process of creating and modernizing a solution/system design));
- Knowledge of generally accepted methodologies, standards, and key regulatory documents, best practices in the design, construction, deployment, and operation of corporate information security systems;
- Experience in planning, designing, and implementing the solutions listed above;
- Solid knowledge and understanding of typical threats to information systems and corresponding modern protection tools and methods (desirable, including for industrial control systems networks);
- Knowledge of import-substituting Russian solutions, manufacturers, and their products in the field of information security (Positive Technologies, Kaspersky, S-terra, ViPNet, Continent, Aladdin, etc.);
- Mandatory network knowledge and skills at CCNP level or equivalent;
- Solid knowledge in the field of infrastructure solutions (including, but not limited to: Windows infrastructure, virtualization infrastructure (various vendors), backup infrastructure, hardware components (servers, blade chassis, storage systems));
- Confident work in Linux and Linux-like OS;
- Understanding of the fundamentals of conducting audits and inspections of Customer sites and architectures, ensuring project solutions comply with information security requirements;
- Skills in developing specifications, technical proposals, and information security requirements;
- Confident knowledge of documentation stages/phases/types;
- Confident experience in developing High-Level and Low-Level Design technical documentation in accordance with various requirements (GOST 34, NRFU, NIP, etc.);
- Basic knowledge of the national doctrine, legislation, and standards in the field of information security;
- Developed social skills, presentation skills, communication skills, team leadership and mentorship/tutoring skills;
- Clearly expressed skills in independence, initiative, confidence in own decisions and actions, responsibility, personal effectiveness, time management, prioritization, speed of work;
- Confident use of MS Office, Visio, Project;
- English language proficiency at the level of reading professional texts and communicating with vendor technical support;
- Experience working in system integrators;
- Experience in identifying and investigating information security incidents;
- Personal certification for relevant solutions;
- Possession of vendor-independent information security certifications (ISACA, ISC2, CompTIA, SANS Institute, etc.);
- Higher education in Information Security.
Work Conditions
- Work in a Company accredited by the Ministry of Digital Development in the IT field;
- Official employment, registration according to the Labor Code, compliance with labor legislation;
- Salary level is determined on a permanent basis based on your experience; with increased expertise, salary increases in accordance with Russian market realities;
- Thoughtful and convenient VHI (Voluntary Medical Insurance) from Ingosstrakh;
- Continuous training cycle for employees — both in-house and involving vendor and external training programs to enhance expertise;
- Corporate subscription to xakep.ru;
- One minute from Nagornaya metro station, delicious tea, coffee, chocolate, cookies, fresh fruit in the office;
- Possibility of flexible working hours, remote/hybrid work, flexible start/end of the working day;
- Transparency of technical, project, and business processes, issues are resolved promptly – without bureaucracy;
- Interesting, intensive work in a healthy atmosphere of a friendly team of like-minded professionals, where there is an established process of expertise exchange. We encourage getting involved in work and helping colleagues if we see a problem or opportunity even outside our area of responsibility;
- Horizontal structure ensuring free communication between employees — any employee can discuss their idea with the General Director, project manager, department head, or any other manager. Rigid vertical hierarchies are avoided where possible, but the work process is structured quite clearly: employees are divided into cross-functional teams, each task has a deadline, and general meetings and technical meetups are held for inter-departmental synchronization;
- Company culture based on trust and transparency, openness and honesty, triumph of common sense and meritocracy, creative freedom, and the ability to admit and forgive mistakes;
- Initiatives are welcomed and encouraged; creative approach; desire to participate not only in the implementation but also in the development and discussion of projects; desire to develop oneself and others;
- Casual dress code.