We are looking for a highly qualified cybersecurity expert for automated systems and business processes to join our cybersecurity assurance team.
Your responsibilities will include:
- Conducting expertise of IT solutions for compliance with cybersecurity requirements, risk assessment, identifying vulnerabilities in business processes
- Consulting agile teams on cybersecurity issues
- Analyzing architectural artifacts and technical specifications for compliance with cybersecurity requirements
- Participating in the organization of development of cybersecurity architectural solutions for the bank's systems.
What is important to us:
- Higher technical education (preferably in IT, Information Security)
- Experience in an information security department, expertise in IT solutions for cybersecurity compliance
- Knowledge of web service operation principles; client-server architecture implementation; protocols and principles of client-server interaction - HTTP(S), RPC\gRPC, SOAP\WSDL, REST; structure of XML, JSON messages
- Ability to understand/analyze program code in one or more languages
- Understanding of threat landscape and OWASP TOP 10 classification (including understanding of web application vulnerabilities server-side (injections, LFI/RFI, IDOR, XXE, etc.) and client-side (XSS))
- Knowledge of TLS
- Knowledge of authentication and authorization protocols (Kerberos, OpenID Connect, OAuth, SAML)
- Knowledge of legislation, primarily Federal Laws: on Banks and Banking Activities (FZ 395), on Personal Data (FZ 152), on Electronic Signatures (FZ 63)
- Knowledge of STO BR IBBS, PCI DSS
- Knowledge of banking processes.
Any of the following knowledge will be a plus:
- Java, Python programming skills
- OpenShift knowledge
- Network technologies knowledge
- Linux knowledge
- Public Key Infrastructure knowledge
- CISSP, CISA certifications.
We offer:
- Comfortable modern office
- Office work format
- Annual salary review, annual bonus
- Corporate gym and recreation areas
- Over 400 educational programs from SberUniversity for professional and career development
- Adaptation program and mentor support at the start
- Extended voluntary medical insurance, preferential insurance for family, and corporate pension program
- Flexible mortgage discount equal to 1/3 of the Central Bank's key rate
- Free SberPrime+ subscription, discounts on partner company products
- Reward for recommending friends to the Sber team.
