SecOps Engineer (offline)

Main requirements

— 4 years + experience as a Cyber Security Engineer or a similar role

— Administrating OS: Ubuntu Server

— Experience with security assessment and audits

— Good knowledge of OWASP, common popular types of web and mobile applications vulnerabilities, secure development best practices

— Understanding of MITRE, NIST, CIS or ISO type of framework and experience in internal processes review according to any of such framework

— IDS, IPS, assets inventory systems setup experience 

— Strong knowledge of SIEM technologies

— Experience across Cloud Security, specifically AWS, GCP

Responsibilities

— Respond to security incidents, collaborating with other internal and third-party teams, investigate and resolve security incidents

— Implement controls on PCI DSS 4.0 requirements changes and lead annual PCI DSS audits.

— Support and extend an internal bug bounty program.

— Collaborate with third-party auditors to scan, monitor, control and mitigate security issues

— Automate repetitive security tasks, like internal and external scans, assets inventory, penetration and segmentation testing  

— Organize training and support to employees and developers on security best practices