Security Engineer in Kitsoft

Hello! :)

We are looking for a Security Engineer to complete the team. Below is a small questionnaire about activities, processes and growth prospects with Kitsoft

How many people in the company: 100 people

What we do: We develop government services and web applications used by millions of users

Kitsoft is a Ukrainian IT company, a leader in the development of technologies for government agencies. Developer of the design system of state websites of Ukraine. Among the company's projects: a platform for the "Diya" portal and online services on the portal (for FOP, LLC, "eMalyatko", "Unemployment assistance"), an electronic service for seafarers "e-Gavan", an electronic policy for the Ministry of Internal Affairs and Communications, web portals for the VRU , KMU, MFA, AMKU, etc. More than 10 years on the market.

What social skills are important to us:

• Interaction with team members
• Ability to form one's own opinion and make decisions< /li>
• Good analytical skills
• Troubleshooting and problem solving skills
• Flexibility
• Skill for continuous learning

Desired professional experience of the candidate:

• Experience in the field of cyber security from 2 years;

• Server administration and workstations running Windows, Linux, macOS operating systems;
• Experience in managing antivirus protection systems;
• Understanding the principles of TCP/IP network protocols;
• Knowledge principles of operation of network and infrastructure security tools, such as firewalls (FW), proxy servers, web defense (WAF), intrusion prevention systems (IPS), intrusion detection systems (IDS), and data recovery systems after intrusions (EDR);
• In-depth knowledge of information protection technologies, cyber threats and methods of their elimination;
• Experience in detecting and investigating cyber attacks and other security breaches;
• Knowledge of processes and methods of finding vulnerabilities in IT infrastructure;
• Malware analysis skills;
• Excellent communication skills and the ability to cooperate with different company departments and external partners.

Will be a plus:

• Higher education in the field of information security, computer science;
• Certificates in the field of cyber security (for example, OSCP, CISSP, CEH, CISM, CompTIA Security+, etc.);
• Understanding of cybersecurity standards such as ISO 27001, NIST, CIS, etc.;
• Intermediate English;
• Experience with Jira, Confluence.

What to do on the project:

• Monitoring of the Company's IT infrastructure with the aim of warning and detecting external or internal cyber incidents;
• Development and implementation of security policies, procedures and standards;
• Implementation of the latest methods of automated search for vulnerabilities in the Company's IT infrastructure;
• Development and implementation of the latest methods detection of attacks on the Company's information systems;
• Investigation of detected malicious software;
• Providing recommendations and exchanging data with the Company's IT department on the Company's information security issues;
• Measures from commercial securitysecrets and intellectual property;

Are they long-term projects?
All projects have lasted for more than 3 years and will continue to exist still a long time to come.

In connection with what the position was opened: In connection with the addition of the team

Size and structure of the team:

• 4 PM
• 3 DevOps
• 5 Node JS Developers
• 3 React Developers
• 8 QA Manual
• 17 JS developers
• 7 VA
• 4 Technical writer

What is the staff turnover on the project?
Turnover is minimal, at this time the team is being supplemented.

If you want to work from the office, we are waiting for you at the address:
Ukraine, Kyiv (32/2 Knyazum Ostrozkih Street, Pecherska/Arsenalna) is there a trial period and how long is it? - 3 months

According to the process:

• Who conducts the resume review? — HRG, QA, PM.
• How many interview stages and with whom? — for this position, we have 2 stages:
• Stage 1 — interview with HRG (duration up to 60 minutes — we check to what extent we and you coincide in terms of values ​​and the presence of the competencies we need in zoom or google meet).
• Stage 2 - a technical interview with part of the team - we focus on standard, fairly "objective" questions to understand the technical level of knowledge and familiarity with the technology. (QA, PM)
• Stage 3 - Security Review

What we value most at Kitsoft:

• We are proud of the innovative and useful products we create
• We value our Friday evenings with colleagues - celebrating birthdays, eating at the table or just spending time together
• Development of everyone employee is the basis of successful work, so you will be supported by both management and colleagues.
• Informal, trusting relationship with management (in any waynt you can ask for help even from our CEO)
• But the most interesting thing is that you will appreciate the most)

If you are close to our values, then you should join us ! :-)