Position: Information Security Officer
Company: DataArt
Experience required: 5y
English level: fluent

Responsibilities

Penetration testing
Quarterly vulnerability assessments
Enhancement of VA scans
Review of the Linux AV solution
Weekly security review of IT Issues
Periodical AppSec reviews
Review of security advisories
RMiT
Tracking of IT contracts and vendor certificates
Yearly PCI-DSS self-assessments
Yearly “Table Top” exercise

Must have

5+ years of experience in IT security, good familiarity with different technologies and architectures (e.g. Linux, Windows, Active Directory, SQL, cloud platforms, etc.)
Minimum 1 year of experience performing vulnerability assessments and penetration tests
Excellent understanding of web application vulnerabilities
Experience with open-source and commercial security tools (e.g. Nessus, Nmap, Burp, sqlmap, etc.)
Knowledge of programming and scripting for the development of auxiliary security tools
Strong experience in information security risk management and governance, threat modeling, and risk analysis
Master's degree in computer science/engineering or a related technical or business discipline or equivalent experience is required
Advanced English
Good Leadership and Communication skills

Would be a plus

Security certificates (CISSP, CISM, CASP, OSCP+ etc.)
Be familiar with common security standards (PCI DSS, ISO 27000, etc.)
Practical experience with Google Cloud Platform