Position: Security Engineer
Company: ReTech
Category: Security
Experience required: 3y
English level: pre
Published: 2022-08-01T00:00:00+03:00

**About project**
We are committed to innovation and support the vision of cryptocurrency’s role in decentralized banking systems and financial services for the future of the world. Our team includes people located in 10+ countries.

**Here you will face with**
- Developing, implementing, facilitating and monitoring information security policies and processes
- Implementing security standards and maintaining best practices in org security, application development and operations
- Based on standards and applicable risk posture, formulating a security baseline for software products of the company: secure development, secure operations
- Clearly and promptly communication and negotiation security technical topics with both technical and non-technical audiences (communicate orgsec to CFO, for example)
- Planning security and technology improvements that affect company security strategy and posture
- Coordinating security awareness training programs
- Working with the business owners to facilitate risk assessment and risk management processes
- Mentoring product teams and assessing/validating new business features from a security standpoint
- Staying up-to-date on emerging security threats, vulnerabilities, and controls for cloud environments

**What makes you a perfect match for this role:**

- 3+ years of experience as a Technical Manager (Information Security Manager, DevOps Lead, Operations Lead), 2+ years of experience in security-related operations and engineering (DevOps, DevSecOps, Security Analyst, AppSec)
- In-depth understanding of information security from a technological and organizational perspective
- Leadership experience: managing processes across 3-5 teams. Strong experience with managing people and pushing technical initiatives forward
- Some experience designing and implementing security processes, protocols, tools and policies in a technically diverse environment
- Some experience in organizational security
- Understanding cloud apps security (microservices security, secrets management, …)
- Understanding and implementation experience with security monitoring (logs, events, SIEMs)
- Be familiar with application security verification and software maturity frameworks: OWASP SAMM, OWASP ASVS, OWASP MASVS
- Understanding of current regulations (fintech, cryptotech) relevant to the company activities

**Will be a plus**
- Hands-on experience with cryptocurrency threats, Linux system’s security, network security, access control, data security, data classification, GCP, GSuite
- Security management certifications (CISSP/CISA/CISM and similar)
In-depth knowledge of security standards and methodologies (NIST, ISO, CMMI, SOC)
- Understanding quantitative and qualitative risk management would be a good bonus NIST RMF, FAIR, ISO 3001
- Security control coverage frameworks

**Benefits**
- Competitive salary according to your position is not just buzzwords for us — we also care about timely salary review
- Business trips and joint remote work: we spent the whole winter in Thailand together, went to China, Georgia, Spain, Bukovel and would love to get you involved
- We care about your development and cover expenses for your learning including professional courses, certificates and conferences
- Absolutely flexible working hours
- Being a part of the team forming the largest crypto-mining ecosystem in the world
- Unlimited vacations & sick leaves
- Only necessary processes and no bureaucracy

**Location** - Remote