Position: DevSecOps Engineer
Company: Edunav Inc
Category: Sysadmin
Experience required: 1y

EduNav is a leading developer of student academic planning and optimization software for educational institutions. Our product helps students to build an optimal path to their graduation and optimize institutional resources. EduNav’s ground-breaking technology and product are unique on the market and make a real difference to tenths of millions of students across the U.S. 

We are looking for SecOps Engineer with strong expertise in IT Security. We need a person who is passionate of find and resolving security issues in IT infrastructure. This role will be responsible for building and maintaining IT Security in our company, creating and supporting Security policy, supervising security on PROD infrastructure. This role will be responsible for leading the review of security vulnerabilities across a variety of technologies and environments to determine high-risk vulnerabilities to business assets, leading meetings with business partners to ensure remediation efforts adhere to corporate standards and policies. Also, Identifying and researching security improvement opportunities through interaction with all departments, vendors, and leading practices

Job duties and responsibilities:
Providing expert assessment and remediation advice to our customers, related to Service Organization Controls (SOC 2), etc.
Provide suggestions and recommendations for preparing security policies relevant to the organization’s culture, objectives, and risk tolerance.
Performing activities to support our customers’ data privacy programs, such as Data Privacy Impact Assessments, data inventory, and dataflow mapping.
Creating professional reports for our clients that detail assessment findings.
Lead the review of security vulnerabilities across a variety of technologies and environments to determine high-risk vulnerabilities to business assets.
Develop and maintain a security roadmap.
Identify and research security improvement opportunities through interaction with all departments, vendors, and leading practices.
Stay up-to-date on information technology trends and security standards.
Participate in the development, reporting, and improvement of SecOps and general Security Operations metrics and KPIs.

Requirements:
Security skills:
Experience with Kerberos.
Experience with Encryption.
Experience with Firewalls/ Security groups/ ACLs, WAF.
Experience with IDS/IPS.
Good understanding and experience with Secret management systems (Vault, AWS KMS)
Experience with Disaster recovery.
Experience with Audit.
Understanding of IT security best practices and controls.
Practical experience in areas of cybersecurity.
Knowledge of SANS/CWE Top 25, OWASP Top 10 Proactive Controls and Application Security principals.
Understanding of penetration testing tools (OWASP ZAP or similar)

General skills:
Good understanding of Network (Subnets, Routing tables, NAT, ACL, Firewall).
Experience with Cloud computing: AWS.
Troubleshooting.
Experience with VCS: git, bitbucket, CodeCommit.
Experience with Monitoring: Zabbix, CloudWatch, Prometheus, ELK.
Experience with Log Management tools: Rsyslog, Syslog-ng, log4j.
Experience with Scripting: Bash, Python.
Good understanding and experience with Linux administration: Debian, CentOS.
Writing documentation SDLC
English: Intermediate 

Will be a plus:
Experience with IaaC: Terraform, CloudFormation.
Experience with Microservices tools: Kubernetes, Docker.
Experience with Databases: MySQL, PostgreSQL, MongoDB, Redis.
Experience with Configuration management: Ansible, Chef.
Experience with Virtualization: Xen, KVM, vSphere, Hyper-V

We offer:
Free schedule with disabilities within 10.00-20.00
 20 days holiday
 Medical Insurance
 The costs of training, conferences, seminars 75%
 Covering 50% of English