Security Architect

About the role

Responsibilities

• Integrate Security into CI/CD: Design, build, and maintain a secure CI/CD pipeline by integrating static (SAST), dynamic (DAST), and interactive (IAST) application security testing tools. 
• Automation: Develop and implement automation for security processes, vulnerability management, and compliance checks to ensure continuous security feedback.
• Infrastructure as Code (IaC) Security: Secure IaC scripts (e.g., Terraform, CloudFormation) by scanning for misconfigurations and vulnerabilities before deployment.
• Tooling & Maintenance: Evaluate, implement, and manage security tools for vulnerability scanning, monitoring, and compliance.
• Mentorship & Advocacy: Act as a security champion within the organization.
• Mentor developers and operations teams on secure coding practices and DevSecOps principles.

Qualifications

• Experience: 5+ years of experience in a DevOps, Security Engineering, or a similar role, with at least 2 years focused specifically on DevSecOps. 
• CI/CD Expertise: Proven experience with CI/CD tools such as Jenkins, GitLab CI, any else. 
• Scripting Proficiency: Strong scripting skills in languages like Python, Bash, or Go for automation tasks. 
• Cloud Platform Knowledge: Knowledge of at least one major cloud provider (AWS, Azure, or GCP) and its security services (e.g., AWS Security Hub, Azure Security Center, GCP Security Command Center). 
• IaC Skills: Experience with Infrastructure as Code tools like Terraform, Ansible, or CloudFormation. Container Security: Strong understanding of containerization technologies (Docker, Kubernetes) and their security challenges, including securing container images and runtime environments. 
• Security Tools: Familiarity with a wide range of security tools, such as SAST (e.g., SonarQube, Checkmarx), DAST (e.g., OWASP ZAP, Burp Suite), and vulnerability scanners (e.g., Trivy, Nessus). 
• Soft Skills: Problem solving abilities, strong communication skills, and the ability to work collaboratively across different teams.

Benefits

• Help us challenge injustice by creating fair choices for millions of people across 47 countries.
• Develop your professional skills with access to mentoring, career consulting, and learning programs.
• Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program.
• Engage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects.
• Work alongside people who take initiative, speak openly, and challenge themselves to grow.
• Improve your language skills through co-financed courses and internal speaking clubs.
• Annual salary from 70 700 EUR gross.

Чем предстоит заниматься:

• Лидировать создание и эксплуатацию производственных и ИТ-систем согласно передовым практикам;
• Участвовать в построении процессов создания и эксплуатации производственных и ИТ-систем во взаимодействии IT operations и Cybersecurity.
• Обеспечивать стабильное функционирование и отказоустойчивость инфраструктурных сервисов (Active Directory, FreeIPA, DNS, DHCP и т.д. ), платформ виртуализации;
• Управлять системой резервного копирования CyberBackup: разрабатывать политики бэкапов, настраивать DRP-план и проводить тестовые восстановления данных;
• Развивать систему мониторинга Zabbix & Grafana для проактивного выявления сбоев в работе оборудования и программного обеспечения;
• Автоматизировать устранение программных и конфигурационных уязвимостей, анализировать риски, достигать KPI по закрытию уязвимостей на год;
• Планировать и внедрять обновления операционных систем и ПО, контролируя программные зависимости и минимизируя влияние на производственные процессы;

• Взаимодействовать и координировать работу с внешними поставщиками услуг;

• Актуализацизровать и развивать документацию (Yandex Wiki) по сопровождаемым системам/решениям;

• Участвовать в реагировании на события информационной безопасности в части анализа и предоставления детальной информации о производственных и ИТ-системах.

Эта вакансия Вам подходит, если:

• У вас есть высшее образование в сфере информационных технологий или информационной безопасности.
• Вы уверенно владеете стеком технологий: Active Directory, FreeIPA, OpenLDAP, Ansible, Yandex Cloud, VK Cloud, Zabbix, CyberBackup, Kaspersky (KES, KSC, KEDR, KICS), СКДПУ, Zvirt, Ovirt, системами управления уязвимостями.
• Вы обладаете опытом применения практик ITIL/ITSM: управление изменениями, конфигурациями, инцидентами и жизненным циклом обновлений.
• Вы участвовали в пилотных проектах внедрения новых решений, реагировании на инциденты ИБ и подготовке отчетности о рисках.

• Работу на одном из крупнейших международных предприятий Санкт-Петербурга;
• Официальное трудоустройство, соблюдение Трудового Кодекса РФ;
• Конкурентоспособную заработную плату;
• Оплачиваемый больничный до 100% оклада;
• Полис ДМС (расширенный со стоматологией), страхование жизни;
• Корпоративный комфортабельный транспорт от: ст. м. Московская, м.Ленинский проспект;
• Компенсацию питания (имеется столовая на территории фабрики);
• Пятидневную рабочую неделю (гибридный формат работы - 3 дня из офиса, 2 дня из дома), пятница - сокращённый рабочий день (до 16:30);
• Сервис «Понимаю» - бесплатные консультации психологов, юристов, финансистов, специалистов по здоровому образу жизни;
• Скидки от партнеров компании (изучение английского языка, фитнес и многое другое);
• Лучший кофе в офисе и в виде корпоративных подарков раз в квартал :)

Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company’s DNA, shaping its technological capabilities to defend businesses, citizens, and support law enforcement operations.

Group-IB’s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats. These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities.

ABOUT THE ROLE

This role is at the intersection of technology, security, and business, providing an opportunity to make a real impact in fighting financial crime. As a Solution Manager, you will bridge the gap between cutting-edge fraud prevention technologies and real-world business challenges, helping clients strengthen their security posture. The position offers exposure to a variety of industries, high-level engagements with key stakeholders, and the chance to shape the future of fraud prevention strategies.

If you thrive in a dynamic environment where innovation and expertise drive meaningful change, this role is for you.

YOUR MISSION

• Serve as the primary subject matter expert (SME) for fraud protection solutions throughout the sales cycle.
• Conduct product demonstrations, Proof of Concepts (POCs), and workshops to showcase fraud detection and prevention capabilities.
• Oversee and coordinate pre-sales activities, ensuring seamless execution and alignment with customer objectives.
• Assess customer needs, fraud risks, and regulatory requirements to recommend optimal fraud prevention strategies.
• Develop comprehensive project documentation to ensure alignment with project requirements.
• Work with customers to design and refine solution implementation architecture, ensuring alignment with their technical and business needs.
• Prepare and present technical proposals, RFP responses, and compliance documentation.
• Gather customer feedback and relay insights to product teams to enhance solution offerings.
• Deliver seminars and training sessions on product capabilities, industry best practices, and implementation strategies.
• Represent the company at marketing events, including exhibitions, podcasts, webinars, and public speaking engagements.
• Assist clients during POCs by defining success criteria, overseeing solution installation, and coordinating technical tasks such as integration, deployment, testing, and configuration.
• Assist clients during Solution Delivery with installation, and configuration of Group-IB solutions at the customer's site or remotely.
• Providing technical support throughout all project phases, including installation, post-sales integrations, and ongoing support.

WHAT WE ARE LOOKING FOR

• Minimum 3 years’ experience in cybersecurity or fraud prevention, or 5 years in high-tech IT industries.
• Proven track record in pre-sales, solution consulting, or technical sales within fraud prevention, cybersecurity, or related fields.
• Deep understanding of information security, including key threats, evolving fraud tactics (botnets, malware, social engineering), and advanced protection mechanisms.
• Hands-on experience with fraud detection tools, session-based fraud prevention, enterprise fraud management (EFM) systems, authentication technologies, risk-based scoring models, behavioral biometrics.
• Ability to translate complex technical concepts into clear, business-focused insights for diverse stakeholders.
• Solid understanding of modern operating systems, including mobile platforms, their architectures, security features, and vulnerabilities.
• Solid understanding of front-end/API integrations.
• Proficiency in cryptographic principles and their applications in fraud prevention and cybersecurity.
• Strong communication skills to convey technical insights in alignment with business objectives.
• Proactive mindset with a strong commitment to continuous learning and professional growth to become a recognized expert in the field.

WHAT SETS YOU APART

• Familiarity with network technologies (DNS, DHCP, IP, OSI/ISO, SSL, VPN, etc.).
• Knowledge of various operating systems and their security frameworks.
• Understanding of web, Android, and iOS application architectures.
• Experience with web technologies (browsers, web servers, HTML/CSS, JavaScript, frameworks, protocols, etc.).
• Knowledge of the banking ecosystem and payment industry technologies.
• Fluency in Arabic and English.
• Fluency in French is highly appreciated.