Position: Head of Incident Response and Application Security Sub-Dep
Category: Security
English level: upper
Years of experience: 5

- Optimisation of exists security monitoring and build new. 
- Prevention from 0-day attacks
- Develop Secure SDLC
- Perform various types of penetration tests (web, mobile, api, docker etc.)
- Manage SOC team
- Implement SSDLC development.
- Develop pentesting methodology based on OWASP WSTG/MSTG for pentest team.
- Close working with DevOPS and QA teams within of CI/CD proccesses.
- Develop secure architectures with Business Development teams.
- Perform security analysis of existing architectures and solutions.
- Write recommendations to improve security of exists architectures.
- Working together with Incident/Response and Vulnerability Management teams.
- Describe risks and how to mitigate them for solutions.
- Perform security testings (SAST/DAST/IAST) of Web/Mobile/Docker applications and docker-based solutions.
- Implementation of SIEM system based on Elastic Stack
- Implementation monitorings of security assets using Zabbix, Prometheus, Grafana
- Infrastructure network pentests
- PCIDSS compliance pentest
- Expirience with Kali Tools (burpsuite, owaspzap, metasploit etc. )
- Expirience with Nessus, Netsparker, Fiddler, Acunetix
Only remote, preferable vacancies: DevSecOps/Senior Application Security Engeneer/Cyber Security Solution Architect