Position: CyberSec Engineer
Company: CNA International
Category: Security
Experience required: 3y
English level: intermediate

We are looking for an experienced CyberSec Engineer to join an international company that creates cutting-edge IoT solutions. The team creates innovative, battery-free tags that can track location, check the temperature, and detect the object’s movement.

CyberSec Engineer will work with all business units, supporting and maintaining IT security solutions and related governance for empowering business success. IT Security will be responsible for protecting Cloud and IT infrastructure, edge devices, networks, and data. Also for preventing data breaches and monitoring and reacting to attacks.

Responsibilities:
- Assist, and guide implementation of the ISMS activities;
- Monitoring the compliance of information security policies and procedures;
- Report to Senior Management periodically on different ISMS activities;
- Responsible for IT security, recognizing the security threats, and working with the IT team on closing vulnerabilities and mitigating misconfigurations;
- Monitoring and auditing that company’s critical assets are secured and controlled;
- Incident Response – testing for and resolving system vulnerabilities, maintaining strong security best practices and providing support for all incident handling measures;
- Install, configure, test, and maintain security systems, and other security tools related to IT Security.

Requirements:
- 3+ of experience in IT Security (ITSecurity and Cloud
tools);
- Strong private and public cloud security experience;
- Experience and knowledge in security architecture, identity and access management, application security, and network security;
- Experience with Identity, SSO solutions and methodology. SAML and similar protocols;
- Threat intelligence analyst experience. SIEM analyst experience;
- Incident forensics (Digital forensics and incident response (DFIR));
- ISO 27001/27018 knowledge;
- SOC 1/2 knowledge.

Would be a plus:
- Zero Trust principle knowledge;
- RBAC and user management;
- Familiarity with security & privacy frameworks, NIST CSF, 800-53, GDPR, CCPA;
- Experience with modern cloud applications and services; AWS, Azure, GCP, Okta, FusionAuth, etc;
- CyberSecurity certification.

The company offers:
- Health insurance;
- 21 vacation days;
- Equipment is provided;
- International working environment;
- Opportunities for professional and career growth.