Position: Senior IT Security Engineer
Company: Infrascale
Experience required: 5y
English level: upper

What we are looking for:
The “Infrascale” Inc. is expanding its presence in the market and is looking for top-notch security talent to help broaden our security and compliance program. The IT Security Engineer will be responsible for the technical implementation and maintenance of the “Infrascale” Inc. security program for both our corporate entity and our cloud offering. The role helps maintain existing security tooling, architect new security tools, and process and will work directly with development and engineering teams to ensure security is integrated into all our product offerings. The ideal candidate for this role is highly technical and possesses the ability to independently deliver security solutions for the company. This includes architecting, developing, integrating and running the tools and processes required to maintain a well-rounded information security program. This position reports to the Director, Security & Compliance (in the United States) but will work in our Kyiv, Ukraine office – along site our operations team.

Key Responsibilities:
· Design, develop and implement information security solution architectures that support control implementation across a broad set of hardware and software systems.
· Independent delivery of technical security tooling projects from design through implementation and ongoing monitoring.
· Design, implement and maintain security applications and standards to assist the business in achieving industry-recognized security and compliance standards. Including ISO27001, SOC, FedRAMP, PCI, SOX, EU Data Privacy Directives.
· Provide technical guidance to software development and engineering teams on the implementation of security best practices during development life cycles.
· Implement, test, document, and maintain enterprise-wide Information Security solutions.
· Coordinate, facilitate, and maintain ongoing Information Security programs including the remediation of identified vulnerabilities, security alerts, and applicable reporting metrics.
Requirements:
· Education requirement: BA or BS degree in an IS or related
· Minimum 3 to Preferred 5 years experience in an information security role.
· Technical/functional skills: Must have
· Experience in implementing corporate security programs and security architectures to support business needs.
· Expert level knowledge regarding the implementation, deployment, and usage of security tools and programs.
· Experience in Security Risk Assessment/analysis support.
· Experience performing vulnerability assessments, QA testing, Implementations & Validations.
 Must have:
· Expert knowledge in Windows and or Linux operating systems.
· Excellent communication and customer interfacing skills.
· Strong documentation and diagramming skills.
Preferred:
· Expert knowledge of at least one scripting language is essential.
· Hands-on experience with NexGen firewalls (Fortinet), Deception systems/ endpoint security (Fidelis), PAM solution (Cyberarc, ObserveIT).
· Experience in assisting businesses in achieving and maintaining industry-recognized security standards such as ISO27001, SOC, FedRAMP, PCI, SOX, EU Data Privacy Directives is preferred.
· CISSP, SSCP, CCSP PMP, CRISC, Security + and/or other relevant certifications highly preferred.
· Experience working within a large enterprise.
 Aptitude or competency skills:
· Excellent verbal and written communication skills with the ability to work cross-functionally and globally.
· Ability to work independently in a fast-paced environment

What you can expect from us:
· Challenging projects and professional team.
· Working on products that are used by hundreds of thousands of users around the world.
· Open communications and open-door policy within the company.
· Paid social package (24 days paid vacation, paid sick day and national holidays).
· Flexible working hours.
· Convenient office location.
· Competitive salary.
· Health insurance.