Title: WAF Engineer
Company: MTS Bank
Location: Moscow
Experience: From 1 to 3 years
MTS Bank is a team that develops digital financial services and makes them accessible to everyone.
We work with a modern technology stack, high-load systems, and cloud infrastructure, implementing best engineering practices. This approach allows us to create reliable solutions for business and clients.
We are looking for a web application security engineer for the cybersecurity department.
Responsibilities:
- Ensure the protection of the company's public and private information assets
- Develop, implement, and operate resource protection systems at the application level
- Monitor and prevent cyber threats, respond to information security incidents
- Interact with external contractors and internal departments on information security issues
Our requirements for the candidate:
- 3+ years of experience in information security
- Understanding of risk management principles and experience in their assessment
- Experience with regulatory documents and development of internal policies
- Data analysis and pattern recognition skills
- Knowledge and understanding of the ISO OSI network model, main protocols, including HTTP(S)
- Experience with industrial-class Application Firewall (Web Application Firewall) solutions
- Experience with open-source WAF solutions, Linux infrastructure, IDS/IPS
- Experience with industrial and open-source solutions for load balancing and traffic delivery at the application level
- Understanding of network technologies and architectures, experience configuring firewalls (iptables, ufw, etc.), network traffic analysis experience
- Understanding of encryption principles, experience using data encryption tools, experience using certification authorities
- Experience with activity automation tools
- Experience with gitlab and gitlab-runner
- Understanding of information security principles for mobile devices
- Continuous professional development and tracking of news in the world of information security, modern security methods
- Ability to work in a team and interact with various company departments
- Stress resistance
Will be an advantage:
- Higher education in information security
- Experience in creating documents regulating information security assurance in an organization (regulations, job descriptions, etc.)
- Experience with ELK and Opensearch, monitoring systems (Zabbix, Grafana, Prometheus)
- Log normalization and mapping skills
- Understanding of CI/CD
- Skills in working with scripting programming languages (Bash, Python, etc.)
- Skills in working with ansible and Semaphore
- Understanding and experience applying PCI DSS
- Experience with information engineering and technical protection systems
- Participation in conferences and other information security events
- Possession of additional certificates and advanced training courses in the field of security
