IT Security Engineer (offline)

Responsibilities:
* Ensuring that information assets and technologies are properly protected, which includes the following:
* Practice-driven information security controls management.
* Enforcement of compliance with these controls and technology-related regulatory requirements.
* Development and applying of security checks to measure the effectiveness and sufficiency of implemented security controls.
* Development of data (incl. PII) protection measures to prevent its loss and misuse.
* Development of practice-driven appropriate security policies and procedures.

Application-related:
* Manage Application Security in accordance with Secure SDLC principles. Management of external BugBounty program, pentesting.

Operations-related:
* Identity and access management. Ensuring that only authorised people have access to restricted data and systems. Maintain a least privilege approach.
* Management of Security incidents. Investigations and forensics. Continuously develop security related event management and incident response processes.

Requirements:
* At least 3-5 years of practical experience in Information Security and/or other IT roles.
* Practical experience in web application security research.
* Broad spectrum of technical knowledge in the following areas (the list is not exhaustive): Linux family, Docker, Kubernetes, AWS, Vault, SSO, Elastic Stack, git.
* Good knowledge of basic technologies and protocols (TLS, HTTP, Web Socket, DNS, OIDC, SAML, WS-Security, LDAP, Kerberos etc.) and threats to them.
* Hands-on experience in development and/or automation.
* English language (Upper Intermediate or higher).


We offer: 
* Official employment in accordance with the laws of Cyprus and the EU, including the registration of family members
* Medical insurance for employees and family members
* Relocation package (visa, tickets, corporate flat for 1 month)
* Сompany's fitness center for employees and their spouses
* English and Greek language classes
* Kindergarten/school compensation program

About Newmen

Newmen — это холдинг, который объединяет консалтинговые агентства и производственные компании.

Агентства обладают отраслевой экспертизой и компетенциями в аналитике, стратегии и управлении проектами. У продакшен-компаний — узкая специализация, профессиональная команда и опыт.

Newmen предоставляет клиентам полный цикл услуг по присутствию бренда в диджитал-среде и настройке офлайн-коммуникаций. Работая в рамках холдинга, продакшен-компании и консалтинговые агентства добиваются синергетического эффекта, способны решать разнопрофильные задачи клиентов и быстро масштабировать команду под проект.

Company website:
https://newmen.co/