Position: Security Engineer
Category: Security
English level: upper
Years of experience: 5

Creating cloud security event-driven checker for Google Cloud infrastructure.
Building access management process from scratch.
Application Security: Performing Security Risk Assessment, Threat Modeling
Tool set: STRIDE, OWASP SAMM, Microsoft TMT, C4, draw.io, Jira, Confluence

Cloud Security: Securing cloud infrastructure using CIS security controls. Automating security checks via cloud functions.
Tool set: Google Cloud Platform, CIS benchmarks, Cloud Custodian

Software Development: Creating event-driven cloud security assessment tool which automates CIS checks for GCP environment and implements automatic reporting and remediation. Developing web add-on for the popular Cloud Custodian open source security tool. Adding support for new vendors to the customer's product (network management) via middle-ware 
Tool set: Python, Flask, MySQL, MongoDB, unittest, SonarQube, gitlabCI, git, perforce, Linux rpm, networking

Access Management:  Access Management process implementation. Creating high-level architecture, access control matrices, documentation, templates, workflow.
Vulnerability Management: Carrying out security reviews on web-applications. Managing vulnerability scanners, filtering reports, prioritizing vulnerabilities. WAF implementation.

Network Engineering: Performing Routing, Switching (Cisco/Extreme), unified communications (Cisco Call Manager, Contact Center). Performing network architecture reviews, creating designs.
Network Security: Configuring firewalls (Palo Alto)
Remote mode only. Based in Almaty, Kazakhstan.