Title: Senior Information Security Engineer
Company: PepsiCo
Location: Moscow
Experience: 3 to 6 years
Responsibilities:
- Administration and support of 7-9 core security solutions (including DLP, PAM, DDoS protection, WAF, vulnerability scanners, antivirus software, etc.) to ensure continuous protection of IT infrastructure and data. This includes regular updating, patching, and health checks of all assigned systems to prevent security vulnerabilities;
- Installation, configuration, and troubleshooting of security systems. Leading the technical implementation of new security tools and modification of existing configurations to counter emerging threats or changing business requirements. Resolving complex technical malfunctions to minimize system downtime;
- Responding to and investigating information security incidents. Acting as a key technical specialist during security breaches or attack attempts. Analyzing alerts, localizing threats, containing impact, and participating in the recovery of affected systems to protect data and company reputation;
- Managing vendor and service provider teams. Collaborating with external contractors to ensure the quality of provided services meets company standards. Coordinating vendor activities regarding solution implementation, support, and problem resolution, acting as the primary technical point of contact in vendor relationships;
- Providing user support (L3 Expert support) across Russia for security tool-related issues. Acting as an escalation point for employees experiencing problems with security software (e.g., blocked access, DLP alerts). Promptly addressing and resolving these issues to ensure business continuity and user productivity;
- Performing service management functions (Solution Manager responsibilities). Overseeing the entire lifecycle of assigned security solutions. Monitoring service levels, managing capacity, and ensuring the efficient operation of tools and their alignment with business operational needs;
- Developing and implementing a reporting dashboard for functional management. Creating visual analytics and regular reports that provide management with a clear overview of the security landscape, system performance, vulnerability status, and the effectiveness of current protective measures;
- Assessing the effectiveness of current security measures. Conducting regular reviews of the existing security posture to identify weaknesses. Proposing and initiating changes in behavior or architecture of security tools to enhance protection against evolving cyber threats;
- Developing and maintaining technical documentation. Creating and updating internal rules, standards, and instructions related to information security practices, system configurations, and network access policies, to ensure consistency and compliance.
