Position: Infrastructure Security Engineer
Company: EIS
Category: Security
Experience required: 3y
English level: intermediate

EIS Group is looking for an Infrastructure Security Engineer to join our security team. In this role, you will be responsible for ensuring the EIS cloud environments are configured to the highest security standards to prevent cyber-security breaches before they happen. You will play multiple roles, including security engineer providing technical solutions to identify security vulnerabilities, product manager defining and translating risk management requirements into treatments, and iso consultant developing auditing methodologies to manage and protect data in cloud computing environments. The ideal candidate comes with a strong sense of security, a DevOps mindset and shares our vision and values to bring their best in solving these challenges together.

Responsibilities:
 - Providing technical solutions to identify security vulnerabilities
 - Detection and patching vulnerable OS libs and software
 - Involvement in infrastructure solutions and automation efforts regarding security aspects such as passwords, tokens, SSL, secrets management, secured deployment
- Monitoring and designing AWS/Azure security rules, patches, and solutions
- Kubernetes and Docker security aspects, Kubernetes authentification and secrets storage
- Nessus management settings/reports, security scan adjustment for infrastructure 
- Performing Static code analysis as Sonar and reporting vulnerabilities
- Source dependency checks - OWASP plugin for verification source code by NIST
- Providing guidance in assessing the security of cloud infrastructure, networks, and systems
- Developing auditing methodologies to manage and protect data in cloud computing environments
- Monitors vulnerability disclosure lists to identify issues affecting EIS systems and infrastructure
- Participating in Risk Assessment and Risk Management as is part of the Information Security Management System
- Identifying new security threats by conducting security systems review/monitoring through active watch and review of reported events
- Performing testing of the ISO controls
- Escalating issues from vulnerability bulletins and discussing countermeasures necessary to protect EIS assets

Requirements:
- Good knowledge of Linux and Windows administration
- Experience working with Azure/AWS clouds
- Proficient with settings of webservers - Nginx/Apache and cloud load balancers
- Proficient with settings of application servers - Jboss/ Tomcat
- Network Protocols Experience
- Proficient with automation routine tasks: python, bash is plus
- Experience working with Docker (building, maintaining, executing Docker images). Knowledge of dockerfiles; Kubernetes

As a plus:
- Experience in settings of database and identifying bottlenecks, especially in security scope: PostgreSQL, MySQL, Oracle, MSSQL
- Possesses knowledge of ISO27001 or another security audit compliance
- Knowledge of OWASP SAMM

What we offer:

- Variety of new knowledge sharing and training opportunities
- Unique international working environment
- Сompetitive salaries
- Paid vacation and sick leave
- Medical insurance
- Various social and team-building activities
- English lessons