DevSecOps Engineer (offline)
EduNav is a leading developer of student academic planning and optimization software for educational institutions. Our product helps students to build an optimal path to their graduation and optimize institutional resources. EduNav’s ground-breaking technology and product are unique on the market and make a real difference to tenths of millions of students across the U.S.
We are looking for SecOps Engineer with strong expertise in IT Security. We need a person who is passionate of find and resolving security issues in IT infrastructure. This role will be responsible for building and maintaining IT Security in our company, creating and supporting Security policy, supervising security on PROD infrastructure. This role will be responsible for leading the review of security vulnerabilities across a variety of technologies and environments to determine high-risk vulnerabilities to business assets, leading meetings with business partners to ensure remediation efforts adhere to corporate standards and policies. Also, Identifying and researching security improvement opportunities through interaction with all departments, vendors, and leading practices
Job duties and responsibilities:
Providing expert assessment and remediation advice to our customers, related to Service Organization Controls (SOC 2), etc.
Provide suggestions and recommendations for preparing security policies relevant to the organization’s culture, objectives, and risk tolerance.
Performing activities to support our customers’ data privacy programs, such as Data Privacy Impact Assessments, data inventory, and dataflow mapping.
Creating professional reports for our clients that detail assessment findings.
Lead the review of security vulnerabilities across a variety of technologies and environments to determine high-risk vulnerabilities to business assets.
Develop and maintain a security roadmap.
Identify and research security improvement opportunities through interaction with all departments, vendors, and leading practices.
Stay up-to-date on information technology trends and security standards.
Participate in the development, reporting, and improvement of SecOps and general Security Operations metrics and KPIs.
Requirements:
Security skills:
Experience with Kerberos.
Experience with Encryption.
Experience with Firewalls/ Security groups/ ACLs, WAF.
Experience with IDS/IPS.
Good understanding and experience with Secret management systems (Vault, AWS KMS)
Experience with Disaster recovery.
Experience with Audit.
Understanding of IT security best practices and controls.
Practical experience in areas of cybersecurity.
Knowledge of SANS/CWE Top 25, OWASP Top 10 Proactive Controls and Application Security principals.
Understanding of penetration testing tools (OWASP ZAP or similar)
General skills:
Good understanding of Network (Subnets, Routing tables, NAT, ACL, Firewall).
Experience with Cloud computing: AWS.
Troubleshooting.
Experience with VCS: git, bitbucket, CodeCommit.
Experience with Monitoring: Zabbix, CloudWatch, Prometheus, ELK.
Experience with Log Management tools: Rsyslog, Syslog-ng, log4j.
Experience with Scripting: Bash, Python.
Good understanding and experience with Linux administration: Debian, CentOS.
Writing documentation SDLC
English: Intermediate
Will be a plus:
Experience with IaaC: Terraform, CloudFormation.
Experience with Microservices tools: Kubernetes, Docker.
Experience with Databases: MySQL, PostgreSQL, MongoDB, Redis.
Experience with Configuration management: Ansible, Chef.
Experience with Virtualization: Xen, KVM, vSphere, Hyper-V
We offer:
Free schedule with disabilities within 10.00-20.00
20 days holiday
Medical Insurance
The costs of training, conferences, seminars 75%
Covering 50% of English
We are looking for SecOps Engineer with strong expertise in IT Security. We need a person who is passionate of find and resolving security issues in IT infrastructure. This role will be responsible for building and maintaining IT Security in our company, creating and supporting Security policy, supervising security on PROD infrastructure. This role will be responsible for leading the review of security vulnerabilities across a variety of technologies and environments to determine high-risk vulnerabilities to business assets, leading meetings with business partners to ensure remediation efforts adhere to corporate standards and policies. Also, Identifying and researching security improvement opportunities through interaction with all departments, vendors, and leading practices
Job duties and responsibilities:
Providing expert assessment and remediation advice to our customers, related to Service Organization Controls (SOC 2), etc.
Provide suggestions and recommendations for preparing security policies relevant to the organization’s culture, objectives, and risk tolerance.
Performing activities to support our customers’ data privacy programs, such as Data Privacy Impact Assessments, data inventory, and dataflow mapping.
Creating professional reports for our clients that detail assessment findings.
Lead the review of security vulnerabilities across a variety of technologies and environments to determine high-risk vulnerabilities to business assets.
Develop and maintain a security roadmap.
Identify and research security improvement opportunities through interaction with all departments, vendors, and leading practices.
Stay up-to-date on information technology trends and security standards.
Participate in the development, reporting, and improvement of SecOps and general Security Operations metrics and KPIs.
Requirements:
Security skills:
Experience with Kerberos.
Experience with Encryption.
Experience with Firewalls/ Security groups/ ACLs, WAF.
Experience with IDS/IPS.
Good understanding and experience with Secret management systems (Vault, AWS KMS)
Experience with Disaster recovery.
Experience with Audit.
Understanding of IT security best practices and controls.
Practical experience in areas of cybersecurity.
Knowledge of SANS/CWE Top 25, OWASP Top 10 Proactive Controls and Application Security principals.
Understanding of penetration testing tools (OWASP ZAP or similar)
General skills:
Good understanding of Network (Subnets, Routing tables, NAT, ACL, Firewall).
Experience with Cloud computing: AWS.
Troubleshooting.
Experience with VCS: git, bitbucket, CodeCommit.
Experience with Monitoring: Zabbix, CloudWatch, Prometheus, ELK.
Experience with Log Management tools: Rsyslog, Syslog-ng, log4j.
Experience with Scripting: Bash, Python.
Good understanding and experience with Linux administration: Debian, CentOS.
Writing documentation SDLC
English: Intermediate
Will be a plus:
Experience with IaaC: Terraform, CloudFormation.
Experience with Microservices tools: Kubernetes, Docker.
Experience with Databases: MySQL, PostgreSQL, MongoDB, Redis.
Experience with Configuration management: Ansible, Chef.
Experience with Virtualization: Xen, KVM, vSphere, Hyper-V
We offer:
Free schedule with disabilities within 10.00-20.00
20 days holiday
Medical Insurance
The costs of training, conferences, seminars 75%
Covering 50% of English
About Edunav
EduNav is a leading developer of student academic planning and optimization software for colleges and universities. We bolster your student success efforts by unifying the planning, scheduling and registration experience of your students and generating a personalized and always up-to-date optimal path to completion for every student. This results in greater student insight and accountability, improved student persistence and completion, and better optimized institutional resources.Company website:
https://www.edunav.com/
DOU company page:
https://jobs.dou.ua/companies/edunav-inc/
The job ad is no longer active
Job unpublished on
27 May 2022
Look at the current jobs Sysadmin Lviv→
Average salary range of similar jobs in
analytics →
Similar jobs
Ukraine
System Administrator at SmartyAds
Ukraine
System administrator at Netovo Group
Ukraine
All jobs Sysadmin Lviv All jobs Edunav Inc