Hello!
We are SOVCOMBAHNК TECHNOLOGIES – an accredited IT company of the Sovcombank Group. Our team is engaged in the creation and development of technological solutions for the companies of the general group, helping businesses promote unique services for clients. We have over 5000 employees in our team, including developers, analysts, testers, project managers, solution architects, and an information security team.
Responsibilities:
- Ensuring the security of payment information systems;
- Participation in bank projects (processing center, core banking system, etc.) as an information security analyst;
- Development and support of security standards (integrity, confidentiality) for payment orders;
- Implementation of measures to protect the integrity of payment orders (signing, access control, system integration).
Requirements:
- Knowledge, understanding, and practical application of: Principles of construction and security of distributed information systems;
- Knowledge and experience in assessing real technical risks of information systems (OWASP, IS attack vectors), developing and implementing security mechanisms;
- Experience working with payment systems ARM KBR, SPFS, Finline, SWIFT, processing centers, and core banking systems;
- Understanding of 3D Secure security principles, tokenization, data masking (experience in writing regular expressions);
- Knowledge of architectures and technological processes in core banking systems and processing centers;
- Knowledge of protection measures against the main types of attacks on payment information systems;
- General understanding of cryptography: symmetric/asymmetric cryptography, mTLS, digital signatures, certificate infrastructures and certification authorities.
Will be a plus:
- Knowledge of regulatory and industry standards in information security (PCI DSS, ISO 27001, STO BR IBBS, FSTEC, etc.);
- Experience in preparing technical specifications and project documentation;
- Experience with HSM;
- Understanding of the operation, concepts, and rules of anti-fraud systems;
- Good general knowledge in the field of information security.
WE OFFER:
- Work in an accredited IT company
- Employment according to the Labor Code of the Russian Federation from the first day of work
- A strong team and an experienced mentor during the adaptation period
- An extended portfolio of benefits: Voluntary medical insurance with dental care, fitness, sports events, coworking spaces in Sochi and Altai, financial support in various life situations, discounts on insurance packages from the bank and partners, and much more
- We support the professional development of each employee: we have an internal training center and a corporate university. We actively participate in external events and organize our own (hackathons, yukons), we pay for external training and English language courses
- Engagement, comfort, and freedom of self-expression, come join us – it will be interesting!