Security Engineer

About us:

PortaOne is a software developer for communication service providers. We help telcos develop and provide new communication services in places where they didn’t exist before or were inaccessible due to cost. Our products are a unique combination of commercial software (high-quality support, detailed documentation, etc.) while completely open to customers (open-source code, specific tools to support client-created modifications). If using a metaphor, we provide reliable hi-tech vans for communications industries' Wild West pioneers.

The company was founded in 2001 — and now our staff consists of nearly 250 people. We have 480+ clients in more than 90 countries on all five continents. The demand for our products has been growing for over two decades, and the pandemic even boosted it. So if you look for a challenging job with a highly demanded product and a stable income, PortaOne is the right place!

More information about the company can be found in the video https://www.youtube.com/watch?v=aNGExoTVpLM with PortaOne CEO Andrey Zhilenko or on our website portaone.com.

Security Engineer Areas of Responsibility:

• Development and management of corporate network perimeter firewalls and security modules like IPS, URL Filtering, etc.;
• Conduct periodic scans of networks to find any vulnerability, also conduct penetration testing, in which simulate an attack on the system to highlight or find any weaknesses that might be exploited by a malicious party;
• Handle security vulnerabilities and risks in the IT environment;
• Handle security incidents as reported by individuals or automated systems; Monitoring of system logs and events to identify possible issue and prevent them
• Evaluate surrounding security aspects of the development process such as CI/CD processes, secret management, monitoring for security events in production, container security;
• Support application security domain during audits and regulations (ISO27001, PCI, GDPR, etc).
• Installation and successfully management of security products and technologies;
• Analyze and respond to previously undisclosed software and hardware vulnerabilities;
• Participate in the creation of policies, standards, and procedures where appropriate;
• Research and suggest solutions and new tools to solve security problems in new topics;
• Process security-related requests;

Qualifications:

• Security Log Management tools (syslog-ng, rsyslog, logstash, graylog, etc.)
• 2+ years of experience as a Security Systems Engineer dealing with security of network and information technology;
• Good understanding of computer networks (VLAN, IP addressing, security zones of trust, etc.)
• Experience with IDS/IPS solutions (Palo Alto, Snort)
• Vulnerability Scanners (OpenVAS); Malware and Endpoint Protection tools
• Basic scripting skills (Python, Perl, Bash, etc.)
• Experience in providing information security for corporate network;
• General knowledge of IT security audit techniques; Experience designing secure networks, systems and application architectures
• Experience planning, researching and developing security policies, standards and procedures Thorough understanding of the latest security principles, techniques, and protocols Problem solving skills and ability to work under pressure Professional security certification would be an asset.
• English - intermediate

We offer:

• Professional development
• Excellent career opportunities
• Official competitive salary
• Remotely or office work in сozy office work after quarantine (it's up to you)
• Paid vacations, compensatory leaves and sick leaves
• Highly skilled colleagues who are ready to share knowledge
• Professional trainings
• English classes with the experienced teachers