Position: IT Security Analyst
Company: PMLAB
Category: Security
Experience required: 5y
English level: intermediate

**You will be involved in:**

Acting as a security analyst for any SDLC requests to identify security risk areas
Design security controls for new company’s products/features/3-rd parties integrations during SDLC process
Working closely with delivery and infrastructure teams to drive security issues and controls to resolution
Developing a standardized approach for initial security assessment of projects
Supporting internal audit for their activities at IT Security domain: support collecting info, preparing reports, work with GAPs, planning and execution of corrective actions, etc

**We are interested in:**

Experience of 5+ year as IT security specialist/analyst/acrhitect
Strong skill set at IT Security governance/audit/management/ domains is a must;
Knowledge of ISO 2700x series, NIST standards for access management\data security\endpoint protection, GDPR, PCI DSS. Understanding of AAA concept
Good understanding of computer networks (VLAN, IP addressing, security zones of trust, etc.)
Practical knowledge of security systems on the market (eg. Firewall, Antimalware, IDS/IPS, SSL/IPSec VPN, Proxy, Remote Access, PKI, etc.)
Understanding of Security Log Management tools (syslog-ng, rsyslog, logstash, etc.)
Understanding of common types of security attacks (DNS cache poisoning, ARP spoofing, DDoS, XSS, CSRF, SQL Injection, etc.)
Software development processes and lifecycle background

**Nice to have:**

Knowledge in IT service management ITIL v3\Cobit
ISACA’s CISA/CISM/CRISC certification or CISSP certification
Other IS/ITSec standard-related certification

**Being a member of PMLAB team means:**

Challenging tasks with great opportunity to level up your skills;
Knowledge sharing atmosphere (you have a chance to be a speaker in our internal meetups);
Competitive salary and сonstant encouragement for your efforts and contribution;
20 working days of paid vacation;
100% paid sick leaves;
Medical insurance;
Weekly events of a corporate employee’s work-life balance program with culture, arts, soft skills lections;
Sport competitions (football, PubQuiz, basketball, table tennis, bowling championships every year);
Individual annual training budget with an opportunity to visit paid conferences, training sessions, workshops etc.;
Corporate library and subscriptions for Pluralsight and Safari online;
Unlimited good mood and support!