Information Security Team Lead (Blue Team)
Nauchsoft is an international IT consulting and software development company. We have been in the IT business for 37 years and continue growing.
научсофт · На сервисе с: 21.09.26 12:30
Зарплата не указанаБеларусьМинскУдалёнка
Nauchsoft is an international IT consulting and software development company. We have been in the IT business for 37 years and continue growing.
We are looking for an experienced Information Security Team Lead (Blue Team) to join a team working on a large-scale banking and lending platform. This role is prospective and has been created in line with the company’s planned team expansion.
Responsibilities
Operational Management of the Information Security Team (Blue Team) Supporting the Company’s Internal Infrastructure
- Organize the execution of Information Security processes, including incident management, vulnerability management, and other related processes.
- Organize ongoing support of information security tools and controls within the information security system, including health monitoring, version upgrades, reconfiguration, and other maintenance activities.
- Organize changes to the information security system, including selection, testing, and implementation of information security tools, as well as optimization of Information Security processes.
- Prepare reports and project documentation in the field of Information Security, including policies, procedures, and user-facing articles.
- Collaborate with related departments, including IT, Compliance, Red Team, and other teams, as part of the responsibilities listed above.
Participation in Presales Activities and Projects for Commercial Customers
- Analyze and assess Information Security requests, including Secure SDLC-related topics.
- Participate in calls with prospective customers.
- Analyze customers’ Information Security processes and infrastructure and develop recommendations.
- Participate in the implementation of Information Security processes on customer projects, including the introduction of Secure SDLC practices.
Requirements
- 4–5 years of experience in operational management of an Information Security team.
- Knowledge of the legislation and regulatory requirements of the Republic of Belarus in the field of information security and cybersecurity.
- Knowledge and practical experience in the following technical areas:
- TCP/IP protocol stack and related services (DNS, DHCP, HTTP/HTTPS, NAT, etc.);
- firewalls, NGFW, IDS/IPS, WAF;
- SIEM platforms;
- EDR/XDR solutions;
- vulnerability scanners;
- Windows and Linux system administration;
- Secure SDLC principles: threat modeling, secure code review, and basic OWASP practices.
- Higher education in Information Security or IT.
- Strong communication skills and clear verbal communication in Russian and English; English level B2 or higher, considering participation in presales calls.
Nice to Have
- Experience working with international Information Security standards and practices, including ISO 27001, SOC 2, GDPR, PCI DSS, and others.
- Motivation, goal orientation, and attention to detail.
Working Conditions
- Hybrid work format.
- Periodic presence in the Minsk office is required.
We offer:
- Opportunity for professional self-realization and growth.
- Friendly team.
- 25-days of paid vacation.
- Medical insurance and 100% payment for sick leave.
- Professional training and obtaining certificates at the company's expense.
- Foreign language courses and other corporate programs.
- A variety of corporate events.
- Bonuses in case of wedding or a child’s birth.
- The possibility of remote work from any location.
Похожие вакансии Кибербезопасность
hh.ru
Инженер информационной безопасности
лига цифровой экономикиНа сервисе с: 12.08.26 13:45↑ Вакансия с автоподнятием
Зарплата не указанаРоссияМоскваОфис
Проекты по эксплуатации распределенной инфраструктуры гос. заказчиков в части обеспечения информационной безопасности
Твои задачи:
- Администрирование и сопровождение средств защиты информации
- Участие в процессе внутренней безопасности подразделения
- Опыт работы с ОС семейства Windows и Linux
- Будет плюсом опыт работы со средствами антивирусной защиты (например, Kaspersky), SIEM, системами контроля привилегированных пользователей (например, СКДПУ), реагирования на инциденты ИБ (например, R-Vision) и сканерами уязвимостей (например, MaxPatrol 8 / MaxPatrol VM).
- Опыт работы с системами виртуализации (например, VMware/VirtualBox) и системами мониторинга (Zabbix или др.)
- Знание актуальных техник и тактик кибератак, а также нормативной базы по ИБ (приказы ФСТЭК № 21, 117 и 239).
Теоретические и практические знания сетевых технологий (TCP/IP, VLAN, Routing, Troubleshooting) - Навыки автоматизации процессов (написание скриптов, например Python и Bash)
Что мы обеспечим:
- Технику для комфортной работы
- ДМС, частичную компенсацию фитнеса, доступ к сервису корпоративных скидов, внутренние обучение и многое другое
- Работу в профессиональной среде, состоящей из высококлассных экспертов, которая позволит тебе быстро расти как эксперту
- Ежегодные сессии профессионального развития, результатом которой является план индивидуального развития каждого сотрудника и получение обратной связи
- Сообщества по интересам: Лига Спорта, Лига Творчества, Лига Интеллекта и др., а также возможность организовать свое сообщество и получить поддержку от компании
HireSeeker собирает вакансии со всех площадок и присылает только релевантные. Бесплатно.