Position: Senior Security Engineer
Company: ReTech
Experience required: 3y
English level: upper

The company creates mobile applications for the Health & Fitness category and currently is in the world’s TOP3 (H&F) in terms of sales revenue.

Their applications are sold all over the world with a focus on the USA, Latin America, Europe, and we are actively entering the Asian markets

Senior Security Engineer will be responsible for the design, implementation, and maintenance of our information security systems, as well as identifying and mitigating potential security threats. This role requires a deep understanding of security protocols, systems, and standards, along with a proactive mindset to constantly improve our security posture.

Key Responsibilities:
- Implement and enhance security controls for the company's internal resources, including network, endpoints, and cloud services.
- Develop security policies, standards, and procedures in accordance with industry best practices.
- Implement and manage security tools to detect and handle security events effectively.
- Perform incident investigation, response, and technical analysis to identify the root cause and prevent future security incidents.
- Identify potential vulnerabilities and implement appropriate measures to mitigate risks.
- Regularly assess system security and conduct penetration testing, providing recommendations to improve security.
- Ensure compliance with the latest regulations and compliance requirements.
- Implement application security processes following a Secure Software - Development Lifecycle (SDLC) approach.
- Train staff on information security procedures and best practices.

Requirements:
- Proven experience in implementing security processes, protocols, and policies in a technically diverse environment.
- Strong experience in investigating security events and incidents.
- In-depth knowledge and understanding of Application Security, System Security, and Network Security.
- Familiarity with Mobile Device Management (MDM) tools such as Jamf, MS Intune, and Identity and Access Management (IAM) solutions like Okta, MS Azure AD.
- Experience with vulnerability scanners like Tenable, Qualys, and Endpoint Protection/Endpoint
- Detection and Response (EP/EDR) tools such as Crowdstrike, Sentinel One.
- Knowledge of information security tools (IPS, FW, WAF, AV, DLP, SIEM, GRC, SAST, ESG, ZTNA etc)
- Strong knowledge and experience in implementing security compliance standards such as SOC 2 Type 2, ISO 27001, PCI-DSS, SOX, GDPR, HIPAA.
- Experience in implementing IAM systems, organizing Single Sign-On (SSO), and understanding of SAML and 2FA
- Experience with cloud-based infrastructures (AWS, Azure, GCP) and their security features.
- General knowledge of IT security audit techniques.
- Security certifications such as CISSP, CEH, CISA, or equivalent are highly desirable.

Location
Remote