IT Security Engineer (offline)

Primary Duties:
- Leading Vulnerability Management process in corporate environment
- Participate in and assist with audits of information security program (SOX, GDPR, SOC2, HITRUST)
- Monitor for, triage and track remediation of vulnerabilities in our systems and networks
- Conduct routine log review of information security events, investigating and responding as necessary
- Maintain and enhance monitoring capabilities to ensure the integrity of our systems and networks
- Act as a core member of the Incident Response Team, triaging, responding to and reporting incidents and associated metrics
- Additional Roles and Responsibilities
- Conduct routine log review of information security events, investigating and responding as necessary
- Maintain and enhance monitoring capabilities to ensure the integrity of our systems and networks
- Act as a core member of the Incident Response Team, triaging, responding to and reporting incidents and associated metrics
- Administer and maintain security products (phishing training, vulnerability management, SIEM, IDS, EDR, etc)
- Coordinate and participate in external assessments of our information security (risk assessment, penetration test, incident response tabletop)

Required Skills
- Familiarity with vulnerability management concepts, such as CVE and CVSS
- Strong knowledge of endpoint and server operating systems (e.g. Windows, macOS, Linux) and relevant security risks, controls, and vulnerabilities
- Strong knowledge of network and network security fundamentals
- Familiarity with enterprise security tools (antivirus, firewalls, email monitoring, two-factor authentication, SIEM, IDS/IPS, etc.)
- Knowledge of and experience with compliance/remediation efforts of relevant domestic and international security standards and best practices such as FedRAMP, SOX, SOC2, NIST, GDPR and HIPAA
- Familiarity with cloud computing environments and applications in a security context strongly preferred
- Ability to quickly change priorities and handle simultaneous tasks
- Excellent oral and written communications
- Education / Pre-requisites
- 3-5 years' experience in an information security field
- BS degree in Computer Science, Cyber Security, Information Technology (or related discipline)
- Graduate degree in Information Assurance (or related discipline) or equivalent formal training and experience in Information Security
CISSP or GIAC certifications preferred

About AB Soft

Банк «Південний» - універсальний український банк з 26-річною історією та одна з найбільших фінансових установ країни з українським капіталом.

Ми є одним із лідерів фінансового ринку, адже розуміємо потреби своїх клієнтів. Що важливо, головний офіс Банку знаходиться безпосередньо в Одесі, а це означає, що ти можеш впевнено розраховувати на професійне та кар`єрне зростання, залишаючись жити в найпрекраснішому місті, на березі найчорнішого з морів.

Банк «Південний» представлений у 19 регіонах України, в системі Банку працює понад 2000 професіоналів своєї справи і саме зараз ми знаходимося на етапі кардинальних змін!

Ми гарантуємо своїм співробітникам дотримання вимог КЗоТ, підтримує їх прагнення до самовдосконалення та не стане на заваді вашого креативу й здорових амбіцій!

Company website:
pivdenny.ua