Position: Security Engineer
Company: EveryMatrix
Experience required: 2y
English level: intermediate

Key Responsibilities:

- Conducting regular vulnerability assessments in accordance with PCI DSS and ISO 27001
- Working with the infrastructure and development teams to help mitigate vulnerabilities
- Working with the infrastructure team on managing anti-DDoS solutions and WAF; implementation of DDoS mitigation strategies and WAF best practices
- Monitoring and following up on information security alerts, events, and incidents
- Improving the processes and technologies for monitoring and analysing security events
- Managing and fine-tuning various security tools (SIEM, HIDS/NIDS, anti-DDoS, WAF, Microsoft security products, etc.)
- Implementing security best practices and systems hardening guidelines within the infrastructure
- Being part of the internal Cyber Incident Response Team

Required Skills:

- At least a bachelor’s degree in Information Technology, Cybersecurity, or Computer Science
- 3+ years of experience in Security Engineer, Security Analyst, or similar role
- Hands-on experience with or strong knowledge of: Anti-DDoS solutions and web application firewalls (Imperva, Akamai, Cloudflare, etc.)
- Vulnerability Assessment process and tools (Nessus, Qualys, Nmap, etc.) SIEM and monitoring tools (AlienVault, Splunk, Qradar, Graylog, ELK, etc.)
- Microsoft security technologies and products administration and implementation
- Practical experience or good understanding of the Cyber Incident Response process
- Strong analytical and problem-solving skills, good self-organization; eager to learn and develop cybersecurity skills
- English (Intermediate or higher)

Will be a Plus:

- Experience in Network Security
- Experience with intrusion detection and network monitoring tools (Snort, Suricata, SELKS, etc.)
- Understanding of cloud environments, virtual infrastructure, containers
- Understanding of OWASP Top Ten security risks and how to mitigate them
- Understanding compliance frameworks ISO/IEC 27001, PCI DSS
- IT Security certifications like CompTIA Security+, CCNA (Security), Microsoft 365 Security Administration, etc.