Position: Information Security Engineer
Category: Security
English level: intermediate
Years of experience: 5


• Develop and implement comprehensive vulnerability management strategies, policies, and procedures to proactively identify and mitigate security vulnerabilities across the company;
• Implement and manage vulnerability scanning tools, such as Qualys VMDR/WAS;
• Collaborate with internal teams and external vendors to integrate external security posture platforms like Security ScoreCard and BitSight, leveraging their insights to enhance vulnerability management processes;
• Conduct regular vulnerability assessments to identify and validate vulnerabilities, working closely with system owners to facilitate timely remediation efforts.
• Conduct project audits to assess the security posture of new initiatives, identify potential risks, and provide recommendations for secure implementation.
• Prepare and administer security questionnaires to third-party vendors and acquired companies to evaluate their security practices and ensure compliance with organizational standards.
• Participate in the preparation for the recertification of the company according to the ISO 27001 standard, including the update and maintenance of relevant documentation.
• Actively participate in the handling of information security incidents, collaborating with incident response teams.