Position: Senior Security Engineer
Company: Miratech
Experience required: 5y
English level: upper

Miratech is looking for a Senior Security Engineer. Remote, Fulltime.

Our client is an American online digital brokerage company. Our project is the best investing app because it makes investing in the stock market incredibly easy and very attractive. 86% of the population has never had a chance to own stock because it’s intimidating and expensive, but this application provides an opportunity to break down the barriers to stock ownership and bring the stock market to everyone.
The project: the best Investment & Asset Management Platform, an online stockbroker with an interesting, unusual twist. They pioneered fractional share investing, stock gift cards, and custodial accounts for all, including kids of any age.

The Platform enables one to buy and sell stocks and fractional shares of stock in publicly traded companies, and to buy gift cards that can be used toward the purchase of stocks and exchange-traded funds (ETFs). It is possible for anyone to own stock in their favorite companies including Amazon, Apple, Alphabet, Disney, Nike, Tesla, Cisco, Google, and 1k+ other stocks and ETFs.
This is a truly modern Platform that makes investing in the stock market more accessible, and incredibly easy for all.

We have a distributed project team. Working hours are as close to the Pacific time zone to overlap with team as possible. (if you are located in Ukraine or Europe, you will start your working day at 13:00 CET (Central European time).

**Responsibilities:**
•	Safeguards information system assets by identifying and solving potential and actual security problems.
•	Protects system by defining access privileges, control structures, and resources.
•	Recognizes problems by identifying anomalies with  tools, reporting violations.
•	Implements security improvements by assessing current situation; evaluating trends; anticipating requirements.
•	Determines security violations and inefficiencies by conducting periodic audits.
•	Upgrades system by implementing and maintaining security controls.
•	Keeps users informed by preparing performance reports, communicating system status.
•	Collaborate with vendors to perform penetration testing for internal and cloud environment.
•	Run vulnerability scans and remediate vulnerabilities

**Job Qualifications and Skills**
•	Worked as a security manager/engineer for a SaaS company
•	Develop and implement Information security policies and procedures
•	**** TOP 10 for Web Applications
•	Aware about **PCI-DSS** technical requirenments
•	Well-versed in security operations, cyber security tools, intrusion detection, and secured s
•	**Securing Java** applications
•	Write correlations rules for security alerts 

**Applications and Tools Experience**
•	 (WAF system)
•	** Cloud security**
•	**Vulnerability management tools** (e.g. SecureTrust, Greenbone or Qualys, OpenVAS, Tenable, Nexpose)
•	Collaborate with DevOps for secure System Administration (most Linux, less Windows and MacOS)
•	 Security (Firewalls, Open VPN/Meraki VPN,  equipment)
•	Security operations center tools like **InsightIDR from Rapid7** (or Splunk or similar)
•	Logging tools like  or Sumo Logic, Mode,  ,  Athena

Security certifications (one of below or equivalent):
•	CISSP - Certified Information Systems Security Professional
•	SCS-C01 -  Security Specialty
•	Security+ - from CompTIA

We offer
Strong career opportunities for professionals
A variety of international projects and mobility across them
Career development support and professional certification opportunities
Competitive compensation, advanced bonus systems
Flexible working schedule with a remote possibility
Medical insurance
Corporate, ial, and cultural event