security engineer in fintech

JustMarkets operates in the financial services industry. The security function protects employee devices and server workloads through endpoint security, server protection, and security platform engineering.

• Operate and continuously improve EDR/XDR and endpoint protection controls across macOS and Windows workstations and Linux and Windows server workloads;
• Administer device-security controls through MDM/UEM and related management platforms where applicable;
• Manage the security-control lifecycle, including agent deployment, upgrades, policy configuration, exclusions, health monitoring, coverage-gap remediation, and controlled rollback;
• Build and maintain risk-based operating-system hardening baselines using CIS Benchmarks or equivalent security standards;
• Monitor telemetry and control health, and investigate stale agents, deployment failures, unmanaged systems, policy conflicts, and coverage gaps;
• Troubleshoot false positives, performance issues, security-agent conflicts, and control failures through root-cause analysis and remediation;
• Partner with IT and infrastructure teams on vulnerability remediation, patching, and security configuration improvements;
• Support endpoint- and server-related investigations and execute containment actions when authorized through approved procedures;
• Maintain file-integrity monitoring and isolation readiness for critical systems where required;
• Automate recurring administration, validation, and reporting tasks using scripts, APIs, or platform workflows;
• Maintain clear runbooks, configuration records, deployment documentation, and remediation tracking.

• 4+ Years of hands-on experience in endpoint security, infrastructure security, system security, or a related security engineering role;
• Practical experience administering an enterprise EDR/XDR or endpoint protection platform across a mixed workstation and server environment;
• Strong knowledge of Linux, macOS, and Windows, with the ability to troubleshoot security controls across the remaining platform;
• Experience with endpoint management, MDM/UEM, or equivalent configuration-management workflows;
• Ability to deploy, tune, and troubleshoot security agents, policies, exclusions, telemetry, and containment workflows;
• Experience implementing operating-system hardening and working with native security controls;
• Understanding of access-control models, least privilege, endpoint telemetry, file-integrity monitoring, and host-isolation techniques;
• Ability to automate operational work using at least one scripting language such as Python, Bash, or PowerShell;
• Fluent in Russian;
• Upper-Intermediate or higher level of English;
• Nice to have: Experience working with CIS Benchmarks or comparable hardening standards, experience securing both macOS workstations and Linux production servers, experience supporting a large distributed fleet of managed endpoints or servers, familiarity with SELinux, AppArmor, Gatekeeper, System Integrity Protection, FileVault, Microsoft Defender, Attack Surface Reduction, or BitLocker, experience integrating endpoint telemetry or response workflows with other security platforms, experience in fintech, banking, trading, or another regulated environment, relevant technical education, professional training, or equivalent practical experience.

• 15 Paid vacation days per year;
• 10 Paid sick leave days per year;
• 10 Days for floating Public holidays;
• Medical budget;
• Professional education budget;
• Language learning budget;
• Wellness budget (gym membership, sports gear and related expenses).