Security Engineer in Kitsoft

Security Engineer Kyiv Hello! :) We are looking for a Security Engineer to complete the team. Below is a small questionnaire about activities, processes and prospects for growth with Kitsoft. How many people in the company: 100 people. What we do: We develop state services and web applications that are used by millions of users. Kitsoft is a Ukrainian IT company, a leader in the development of technologies for state bodies. Developer of the design system of state websites of Ukraine. Among the company's projects: a platform for the "Diya" portal and online registration services (for FOP, LLC, "eMalyatko", "Dopomoga pobezrobytyu"), an electronic service for seafarers "e-Gavan", an electronic policy for the Ministry of Internal Affairs and Communications, web portals for the VRU, CMU, Ministry of Foreign Affairs, AMCU secret. More than 10 years on the market. What social skills are important to us: Interaction with team members The ability to form one's own opinion and decision-making Good analytical skills Troubleshooting and problem-solving skills Flexibility The skill of continuous learning Desired professional experience of the candidate: Experience in the field of cyber security from 2 years; Administration of workstation servers running Windows, Linux, macOS operating systems; Experience in managing antivirus protection systems; Understanding the principles of TCP/IP network protocols; Knowledge of the principles of network and infrastructure security tools, such as firewalls (FW), proxy servers, web protection (WAF), intrusion prevention systems (IPS), intrusion detection systems (IDS), and data recovery systems after intrusions (EDR); Deep knowledge of information protection technologies, cyber threats and methods of their elimination; Experience in identifying and investigating cyber attacks and other security breaches; Knowledge of the processes of the methods of finding vulnerabilities in the IT infrastructure; Malware analysis skills; Excellent communication skills and the ability to cooperate with different departments of the company and external partners. It will be a plus: Higher education in the field of information security, computer science; Cybersecurity industry certifications (eg OSCP, CISSP, CEH, CISM, CompTIA Security+, etc.); Understanding of cybersecurity standards such as ISO 27001, NIST, CIS, etc.; English language equal to Intermediate; Experience with Jira, Confluence. What to do in the project: Monitoring of the Company's IT infrastructure with the aim of preventing and detecting external or internal cyber incidents; Development and implementation of security policies, procedures and standards; Implementation of the latest methods of automated search for vulnerabilities in the Company's IT infrastructure; Development and implementation of the latest methods of detecting attacks on the Company's information systems; Investigation of detected malicious software; Providing recommendations and exchanging data with the Company's IT department on the Company's information security issues; Measures to protect commercial secrets and intellectual property; Long-term projects? All projects have been going on for more than 3 years and will continue to exist for a long time. In connection with this, the position was opened: Liaison with team replenishment Team size and structure: 4PM 3DevOps 5Node JSDevelopers 3React Developers 8QA Manual 17JS developers 7ВА 4Technical writer What is the staff turnover on the project? The turnover is minimal,the team is currently being staffed. If you want to work in the office, please contact us at the following address: Ukraine, Kyiv (Knyazum Ostrozkih street, 32/2, Pecherska city/Arsenalna city) Shtopoumovakh: Whose probationary period is it and how long does it last? —3 months What is the work schedule? —the schedule is flexible, depending on the team, from about 10 a.m. to 7 p.m., usually everyone works at this time. At the same time, there is a misunderstanding, if you need to move the working hours, you just need to notify the team Whose possibility to work remotely? - yes, we have a hybrid format, so you can mix the work of Zofice as you like. Number of vacation days? —24 calendar days + company holidays Number of paid sick days per year? - 5 hospital days per year without a doctor's certificate. The reference number of days is unlimited. But, of course, it is better not to get sick) There is an opportunity to learn and improve qualifications, both within the company (individual development plan) and outside of it (all kinds of courses, trainings, up to 70% of the cost is paid by the company) Who can do sports? —of course, the company partially compensates the costs of the gym and other sports activities. The company also has a free Speaking Club for all employees. Additionally, we try to support our employees and give them the opportunity to receive compensation for the services of a psychologist, as well as material support and additional days off from the company, necessary moments of life. Office format? — post-process co-working: Who conducts the resume review? —HRG, QA, PM. How many stages of the interview are difficult? - we will introduce this position in 2 stages: Stage 1 - interview with HRG (duration up to 60 minutes - we check how much our values ​​match and the presence of the necessary competencies in zoom or google meet). Stage 2 — technical interview with part of the team — we focus on standard, rather "objective" questions to understand the technical level of knowledge and familiarity with technologies. (QA, PM) Stage 3 - security review What we value most at Kitsoft: We are proud of the innovative and useful products we create We value our Friday evenings with colleagues - celebrating birthdays, cutting corners at the table or just spending time together The development of each employee is the basis of successful work, so you will support both management and colleagues. Informal, trusting relations with the management (at any moment you can ask for help even from our CEO) But the most interesting thing is that you will appreciate the most) If you are close to our values, then you are welcome! :-)