Position: Information Security Technical Lead
Company: PDFfiller
Experience required: 5y
Category: Security
Published: 2021-03-01T00:00:00+02:00

Requirements:
— 5+ years of experience engineering and administering security technologies;
— Strong cloud security experience with one or more enterprise clouds, AWS preferred;
— Solid knowledge on web application security risks and common attacks (e.g. OWASP Top 10);
— Experience in implementing secure SDLC practices;
— Knowledge of modern authentication/authorization schemes like SAML, OAuth, OpenID;
— Working knowledge of IT security controls associated with Application Security, Vulnerability Management solutions, IPS/IDS, SIEM, cryptography, network, endpoints;
— Technical documentation skills to contribute to security documentation and policies;
— Ability to establish relationships to influence colleagues and to effectively communicate;
— Knowledge and experience with at least one programming language preferred.

Will be a plus: 
— Professional information security certifications.

We offer: 
— The members of our team get monthly bonuses and options contracts (each of us has a share in pdfFiller, so that company growth is a capitalization growth of one’s interest).
— All of pdfFiller employees have access to the company’s financial reports regardless of their role in the team. When the company goes public, the employees get their one-off payments according to their options contracts.
— Regular sports activities in the office with professional coaches: yoga, stretching (3 times a week) and TRX training.
— Paid upgrade career courses, conferences for professionals and English classes are common practice at pdfFiller.
— Medical insurance.
— Staff massage therapist.
— We’ve organized PHP, JS and QA Automation schools based in our office where the trainers are our employees. Anyone may try their hand at one of the schools and attend the course.

Responsibilities:
— Provide expertise and leadership in all security domains;
— Partner with engineering and business stakeholders on security processes and requirements;
— Design and lead implementation of secure SDLC practices;
— Engineering and operational responsibilities in building and managing security controls across a global cloud platform environment;
— Implementation and support of IT security control and various security toolset (SAST/DAST, IPS/IDS, SIEM, Vulnerability management, Firewalls, etc.);
— Supporting IT infrastructure & Web application vulnerabilities and penetration testing;
— Develop and implement information security plans and policies;
— Assist with compliance enforcement, incident response, and security change management processes.