Position: Information Security Specialist
Company: Dev-Pro Talent
Experience required: 2y
English level: intermediate

Dev.Pro is a US-based outsource software development company, founded in 2011, with offices in Kharkiv, Kyiv, Dnipro and Charlotte. We help tech companies to become industry leaders; our accounts are growing constantly. The company offers a supportive yet challenging environment, allowing team members to fulfill their potential through complex projects and investment in their professional development.

You will have the opportunity to prove yourself by making vital decisions for the company in transforming current business processes and establishing new ones according to the best information security practices in all three locations to maintain Dev.Pro’s information security at a high level. This means you will play an active role in implementing and maintaining organization-wide information security policies, standards, guidelines, and procedures, providing security awareness education, and ensuring that all Dev.Pro contractors know their role in maintaining security.

**Responsibilities**

Assisting with maintenance and optimization of internal IT infrastructure, corporate policies and procedures
Providing records of ISMS operation
Risk assessment
Performing security monitoring
Conducting vulnerability assessment of internal infrastructure
Assisting in internal security audits
Implementing security best practice in internal infrastructure
Assisting with security audits of projects

**Required skills**

Technical degree (information or cybersecurity, computer science etc.)
2+ years’ experience in information security
Knowledge of security frameworks/standards (e.g. ISO 27001, SOC2, PCI DSS etc.)
Experience in developing/maintaining ISMS
Understanding of international and Ukrainian information security laws/regulations
Experience with security tools and products (e.g. Nessus, nmap, Burp etc.)
Experience with monitoring tools (e.g. ELK, Graylog etc.)
Experience with configuring security solutions (e.g. firewalls, anti-malware, WAF, VPN)
Intermediate or higher English

**Desired skills**

Knowledge of operating systems, TCP/IP, cloud and virtual infrastructure
Knowledge in providing pentests
Knowledge of web application security (e.g. OWASP ASVS, secure SDLC etc.)

**Benefits**

18-20 paid time off days per year
5 absence due to illness days and 21 day of extraordinary medical leave per year
Medical Insurance and Healthcare Kit
Extensive corporate professional training programs, workshops, ESL and conferences
Team buildings, corporate parties and Dev.Pro Hangouts