Information Security Specialist Junior/Intermediat

Dev.Pro is a US-based outsource software development company, founded in 2011, with offices in Kharkiv, Kyiv, Dnipro, and Charlotte. We help tech companies to become industry leaders; our accounts are growing constantly. The company offers a supportive yet challenging environment, allowing team members to fulfill their potential through complex projects and investment in their professional development.

You will have the opportunity to prove yourself by making vital decisions for the company in transforming current business processes and establishing new ones according to best information security practices in all three locations to maintain Dev.Pro’s information security at a high level. This means you will play an active role in implementing and maintaining organization-wide information security policies, standards, guidelines, and procedures, providing security awareness education, and ensuring that all Dev.Pro contractors know their role in maintaining security.

Responsibilities

• Performing security monitoring of IT infrastructure
• Performing vulnerability assessments
• Detecting and handling incidents according to corporate procedures and international best practic
• Assisting with maintenance and optimization of IT infrastructure, corporate policies, and procedures
• Assisting with internal security audits

• Assisting with security audits of projects

Requirements

Technical skills we expect you to have

• Technical degree (information or cyber security, computer science etc.)
• 2+ years’ experience in the field of information security
• Experience with vulnerability analysis solutions (e.g. Nessus, OpenVas, Rapid7, Burp)
• Experience with monitoring solutions (e.g. ELK, Graylog, Splunk, Nagios)
• Experience with the configuration and maintenance of security solutions (e.g. firewalls, anti-malware, WAF, VPN, DLP, IPSIDS)
• Strong analytical skills
• English - intermediate or higher

Technical nice-to-haves

• Knowledge of security frameworks/standards (e.g. ISO 27001, SOC2, PCI DSS etc.)
• Knowledge of operating systems, TCP/IP, Cloud and virtual infrastructure
• Knowledge of applying pentests
• Knowledge of web application security (e.g. OWASP ASVS, secure SDLC etc.)

Benefits

• Professional and personal growth (leading-edge work with like-minded capable people whom you can learn from)
• Flexible business hours
• 18-20 paid time off days per year
• 5 absence due to illness days and 21 day of extraordinary medical leave per year
• Medical Insurance and Healthcare Kit
• Extensive corporate professional training programs, workshops and conferences

• Team buildings, corporate parties and Dev.Pro Hangouts