Uloguj se

Information Security Engineer

ID: 4417
Grad: Niš
Pozicija: Permanent
Kratak Opis

On behalf of our client, PhoenixNAP, Data Center, who is a leading Global IT Service provider and CCBill integration partner, ManpowerGroup is searching for a motivated and a highly skilled candidate to take the challenge and to successfully fulfil the position of Information Security Engineer. This is an exciting opportunity to work with a highly innovative and creative team, in a great working environment using the latest technologies, methodologies, and frameworks. 

APLICIRAJ Nazad

Opis posla

  • Provide analytical and technical security recommendations to other team members, oversight boards, and clients. Identify requirements, based on needs or resulting from a security issue that puts the organization’s systems at risk.
  • Perform network penetration, web application testing, source code reviews, threat analysis, wireless network assessments, and social engineering assessments.
  • Meet with clients and management to help specify and negotiate application security requirements, review current policies and procedures for applicability, maintain system OS security patch levels, and ensure the safe transition of applications to production.
  • Develop technology to automate security monitoring.
  • Recommend effective security configurations and architecture to active members in technical workgroups.
  • Liaise with the Enterprise Architect, Network Engineering, and Enterprise Management Teams to effectively communicate and architect security solutions.
  • Develop documentation to support ongoing security systems operations, maintenance, and specific problem resolution.
  • Work and coordinate with traditional information security teams to share ideas with the goal of maintaining proper company-wide security standardization.
  • Provide risk analysis for product features and architecture decisions.

Zahtevi pozicije

  • 3+ years’ experience working with information security issues affecting financial service organizations and/or cloud-based application service providers.
  • Expertise in TCP/IP, web architectures, and technologies such as HTML, JavaScript, XML, REST, PHP, and API Gateway.
  • Extensive experience in systems administration, security DevOps processes, system hardening, and patch management strategies.
  • Experience with system automation frameworks (Puppet, Terraform) and CICD pipeline (Jenkins, GitLab CI/CD).
  • Knowledge of cloud-native technologies, key management solutions, and networking strategies.
  • Specific security-related experience including data-at-rest encryption, certificate validation, IDS/IPS, firewalls, SIEM and log management, Syslog analysis, HTTP and TCP/IP analysis, and vulnerability assessments including cross-site scripting, SQL injection, cross-site request forgery, HTTP response splintering, the OWASP Top 10, and SANS Top 25.
  • Bachelor’s degree in information security, information assurance, computer science, management information systems, computer information systems, or a related discipline.
  • Possess at least one of the following professional designations (or one of similar stature):
    • Certified Information Systems Security Professional (CISSP).
    • Certified Information Security Manager (CISM).
    • Certified Information System Auditor (CISA).
    • Certified in the Governance of Enterprise Information Technology (CGEIT).
  • Excellent verbal and written communication skills in English.
  • Ability to communicate with and understand the needs of non-technical internal and external clients.