Position: Security Engineer
Category: Security
English level: upper
Years of experience: 3


Summary:
- Information Security Officer, Security Engineer with 3+ years of hands-on experience.
- Skilled in implementing and supporting internal IT security controls and processes, building an information security management system (ISMS).
- Proven record of successful deployment, support, and administration of security infrastructure (AV, SIEM, NGFW, HIDS, EDR, VM).
- Hands-on experience in cyber threat analysis, security event management, incident investigation, and security routine automatization.
- Cloud experience (GCP, AWS). Transformation of AWS environment according to the AWS Security Best Practices and security standards.
- Skilled in the Infrastructure as a Code (Terraform, Terragrunt).
- Working directly with clients providing them with consulting for applicable compliance and regulations, Cloud Infrastructure Security.
- Certified Security Engineer on AWS.
- Self-motivated and confident team player with strong communication and leadership skills.

Experience:
1.5 years as vCISO:
       - Performed audit based on the ISO 27001, SOC2, GDPR, LGDP, HIPAA/HITRUST, NIST CSF, CIS controls.
       - Cloud Infrastructure security assessment and hardening(AWS,GCP)
       - Developed and maintained information security policies&procedure;
       - Prepared company to ISO27001, ISO27701, SOC2 (Type I and II), HIPAA (Security rule), PCI DSS certifications, and GDPR/CCPA regulations

1.5 years as DevSecOps(current):
       - Security Hardening for all AWS Services utilized
       - Security tools configuration and maintenance
       - Security tools automatization with IaaC
       - Performing review of architectures from a security standpoint
       - Implementing the regular security flows ( vulnerability and patch management, network security, IAM, security monitoring)