Position: Information Security Engineer
Company: Takeoff
Category: Security
Experience required: 3y
English level: upper
Published: 2020-08-01T00:00:00+03:00

Responsibilities:
- Build, improve and contribute toward Information Security’s mission and long-term goals
- Build and improve the Information Security incident response and forensics tooling and processes in partnership with GRC team
- Create custom searches, alerts and dashboards related to improving visibility on security threats
- Perform incident response and technical analysis for forensic investigations
Identify critical security gaps and provide recommendations to improve information security posture
- Assess Software as a Service (SaaS) products for security compliance
- Security assessment of Company software products and infrastructure
- Control and maintain Security during the Software Development Life Cycle
- Proactive management of all found and confirmed security vulnerabilities and threats
- Correctly balance security risk and product advancement
- Threat model of existing applications

Requirements:
- Good understanding of the Information Security aspects
- 3+ years experience in one of the next roles: Security Analyst, Pentester, or Security engineer
- First-hand experience in threat assessment, security architecture design, and security testing
- Passion for learning about adversary tactics, techniques, and procedures (TTP) and interest in creating innovative detection techniques
- Experience in an investigation of security events and incidents is strongly preferred
- Good knowledge of OWASP TOP 10
- Base knowledge of cryptography
- Understanding of application security verification approaches - SAST, IAST, and DAST.
- Familiar with agile development, bug tracking, git and CI/CD
- Strong experience with scripting and automation

What technology stack you’ll be working with:
- GCP and Azure as cloud providers;
- Kubernetes on GKE for docker container orchestration with Helm template engine;
- Terraform as the main tool for IaC management;
- Jenkins for CI/CD purposes;
- Prometheus and ELK for monitoring;
- Services wrote in Clojure and Python;
- PostgreSQL, ArangoDB, CouchDB, Google BigQuery, Elasticsearch, Redis as databases.

Environment:
- Competitive compensation package.
- The office is in the center of Kyiv.
- Schedule in shifts 8 hours a day, 5 days a week.
- Ukrainian holiday breaks, vacations.
- Medical and life insurance.
- Paid lunches.
- Support and training.
- Opportunities for professional growth.