Position: Information Security Engineer
Company: Exadel
Category: Security
Experience required: 2y
English level: intermediate

Requirements:
2+ years in the Information Security area
Intermediate verbal and written English or higher
Ability to perform evaluation of application requirements, processes, technologies
Ability to select, educate and communicate the right solution based on requirements and objectives
Understanding of concepts of a software development process, cloud security, and their assessment methodologies
Willingness to study and discover new areas in Information Security domain and indirectly related domains

Soft skills:
Ability to explain assessment results to technical and non-technical personnel
A strong multi-tasker with a keen eye for details
Proactive team player
Good communication skills, politeness, tolerance
Process-oriented and focused on continuous improvements
Having a sense of urgency and ability to escalate issues in a timely manner
Ability to perform personal daily and weekly planning
Ready to work after regular business hours when needed

Nice to have:
Knowledge of methodologies, standards of production software to provide information security (ISO 27000 series, 800 series NIST, ITIL, IT4I, COBIT, etc.)
Experience designing secure networks, systems and application architectures
Experience in security testing of Web Applications based on different technologies and Web Services (SOAP, RESTful)
Ability to conduct periodic vulnerability assessment and penetration testing
Certification and courses in the Information Security area (CISA/S etc.)
Overall experience in the IT industry
Overall understanding of security measures (in accordance with ISO 27002)
Experience developing procedures/instructions/methods in the area of software to ensure information security

Responsibilities:
Assessing the security level of an infrastructure and web applications; optimizing and improving the whole list of production processes from development to implementation requirements.
Working across Identity and Access Management system: auditing of security configuration and hardening guidelines
Conducting penetration testing, in which an attack is simulated on the system to highlight or find any weaknesses that might be exploited by a malicious party
Ensuring compliance with the requirements of information security in manufacturing, managing and supporting processes of the company: process monitoring, education/training of company’s employees to introduce practices and tools, organization of work on internal audit processes, gathering metrics on processes
Assisting with pre-sales opportunities, delivering security related support
Managing Personal Data Protection laws based on country side specific