Vulnerability Analyst

ADVANTAGES OF WORKING IN OUR COMPANY:

• A unique opportunity to be an innovator in the implementation of information technologies in the industrial sector of Ukraine.
• Acquiring the skill of performing complex tasks within one large product. Interaction with a strong, proactive, open-minded team.
• Opportunity to implement your proposals and innovations.
• Work support, accompaniment and 1-to-1 meetings with the manager.
• The ability to organize training or trainings within the company to transfer experience to your team.
• Participation in workshops and trainings within the company, specialized conferences.
• Participation in competitions within the company to identify and implement creative and initiatives.

WHAT DO YOU NEED TO DO?

• Planning the process of identifying and analyzing vulnerabilities, selecting objects for analysis;
• Identification of vulnerabilities in the company's infrastructure and software, monitoring of open sources of information;
• Analysis and ranking of vulnerabilities;
• Development of recommendations for eliminating detected vulnerabilities and coordination of their implementation;
• Participation in the processes of inventory and classification of information resources;
• Participation in the development of regulatory documentation for vulnerability management;
• Formation of statistical and analytical reports on vulnerabilities.

SKILLS REQUIRED:

• Higher education in IT or information security; 
• Experience of at least 2 years of practical work in the field of information security; 
• Knowledge and skills in using tools for detecting and analyzing infrastructure vulnerabilities (Network, Endpoint), applications (DAST, SAST); 
• Knowledge and skills in operating system update management; 
• Knowledge and skills in the field of analysis of configurations and increasing the security (Hardening) of servers, network devices, workstations; 
• Shared understanding of major standards and approaches to vulnerability assessment (NIST CVSS, MITER CVE, MS VSC)

• Experience in SOC, CSIRT 
• Penetration Testing Experience Vulnerability scanner certification
• Availability of functional certification in the field of information security 
• Experience in administering (implementing)
• Microsoft security technologies and products 
• Programming skills in scripting languages (Python, Powershell, Bash)

WHAT DO WE OFFER: 

• Competitive salary with flexible bonus system. 
• Full official employment and security according to the Labor Code. 
• Health insurance. 
• Corporate mobile communication, which is paid for by the company. 
• The percentage of business trips from working time is 5%. Periodic corporate events, including sports.