Information Security Specialist in Smart Holding / Smart-Holding, OOO

The IT Capital company, which is part of the Smart Holding investment group, invites to its team: Information Security Specialist Duties: Carrying out regular security scans of the external and internal perimeter of the Holding's network Manual processing of scan results, verification of detected vulnerabilities, compilation of reports, vulnerability management Continuous Penetration Testing (CPT ), threat modeling (Threat Modelling) Operation/monitoring of information security systems and response to emerging IS incidents Consulting of internal clients within the framework of systems security projects Participation in IT process automation and improvement projects. Requirements: Experience in IT security, IT testing threats Excellent knowledge of Web Application Security, OWASP Top 10 vulnerabilities Knowledge and experience with SAST scanners (SonarQube, Netsparker, Fortify, Rapid) and DAST scanners (Acunetix, Qualys, OWASP Zap, BurpSuite, nmap) Experience with databases and operating systems Windows, Linux, macOS Understanding of visualization technologies (Hyper-V, VMware, VirtualBox) Experience with cloud platforms (preferably Azure) Scripting/query experience (knowledge of at least one of the following programming languages ​​is welcome, such as Python, Ruby, Java, php );Knowledge of industry standards (ISO 27k, GDPR, NIST) Completion of courses / possession of cybersecurity certificates will be an advantage (OSCP, CEH, CPTE, eWPTX, SANS) We offer: Interesting projects and opportunities for personal, professional and career development growthOfficial employment and all social guarantees of a responsible employerMedical insurance after the end of the trial period (VT - 3 months)Hybrid work schedule