cybersecurity engineer in banking

Описания нет

• Implement, configure, operate, and continuously improve information and cybersecurity controls to prevent incidents, including WAF, DDoS Protection, DLP, PAM, EDR/XDR, Email Protection, Database Firewall, Vulnerability Management, SAST/SCA, Threat Intelligence, MDM, and Password/Secrets Manager
• Develop baseline security configuration requirements for servers, endpoints, network devices, and cloud environments
• Regularly scan IT infrastructure servers and network devices for vulnerabilities and prioritize identified weaknesses
• Configure and monitor information and cybersecurity tools in cloud infrastructure
• Ensure logs from security control systems are delivered to SIEM
• Define security requirements and technical controls during the planning of new systems, services, and infrastructure changes, applying security-by-design principles
• Automate recurring technical tasks using scripts
• Communicate technically with information and cybersecurity solution vendors
• Respond promptly to cybersecurity incidents and take preventive measures
• Respond quickly to information security events and incidents according to established playbooks and runbooks, and perform initial containment actions
• Participate fully in root cause analysis (RCA) of incidents
• Take corrective and preventive measures to prevent incident recurrence
• Collaborate closely with related teams to contain incidents and restore affected systems promptly
• Prepare cybersecurity incident notifications and reports in accordance with the rules and deadlines established by the National Bank of Georgia
• Participate in developing simulation tests and exercises
• Participate in delivering information security training to company employees
• Inform the manager about current attack methods and emerging threat trends that could harm company systems
• Prepare reports on completed work and present them to the manager
• Perform other related tasks

• At least 3 years of experience in cybersecurity engineering or a security-focused IT infrastructure role
• Hands-on experience implementing and operating security controls
• Thorough knowledge of cybersecurity solutions, vendors, protocols, and network and systems infrastructure protection
• Practical knowledge of network and systems infrastructure, including routing, switching, Windows, Linux, VMware, and Active Directory
• Knowledge of hardening and secure configuration for servers, network devices, and endpoints, such as CIS Benchmarks
• Knowledge of scripting and automation
• Analytical thinking, research skills, and attention to detail
• Ability to solve problems quickly and respond promptly
• Good communication skills and ability to handle multiple issues simultaneously
• Teamwork, collaboration, and a continuous improvement mindset

• Условий в вакансии нет