Position: Senior Cyber and Web Security Specialist
Company: PSR
Category: Security
Experience required: 3y
English level: intermediate

Must have: 
3-5 years’ experience in an information security field
BS degree in Computer Science, Cyber Security, Information Technology (or related discipline); Graduate degree in Information Assurance (or related discipline) or equivalent formal training and experience in Information Security
CISSP or GIAC certifications preferred
About the project:
The project is 2 years old 
Developing new CRM-Tools
Improving automated tools for real estate trade
Connecting database with real estate tools
Working on Upload-Tools for real estate sites
Developing Interfaces and working with them
Working   and   developing   functions   like   automailinsys
tems,   usermanagement,
datamanagementsystems (Google Drive), excel uploads and invoice tracking

Tech stack of the project:
JS Vue, PHP Lavarel, Python

Key duties: 
Monitor for, triage and track remediation of vulnerabilities in our systems and networks
Conduct routine log review of information security events, investigating and responding as necessary
Maintain and enhance monitoring capabilities to ensure the integrity of our systems and networks
Maintain information security in the organization
Act as a core member of the Incident Response Team, triaging, responding to and reporting incidents and associated metrics
Administer and maintain security products (phishing training, vulnerability management, web application firewall, SIEM, IDS, (h)IPS, EDR, etc)
Participate in on-call rotation
Additional Roles and Responsibilities:
Maintain a comprehensive understanding of our information systems
Work closely with the multiple operation teams to implement and enforce our policy
Act as member of the information security policy review committee
Conduct risk-based evaluation of policy exception requests
Participate in and assist with audits of information security program (FedRAMP, SOX, GDPR, SOC2, HITRUST)
Coordinate and participate in external assessments of our information security (risk assessment, penetration test, incident response tabletop)