Description
No description provided.
Responsibilities
•Implement, configure, operate, and continuously improve information and cybersecurity controls to prevent incidents, including WAF, DDoS Protection, DLP, PAM, EDR/XDR, Email Protection, Database Firewall, Vulnerability Management, SAST/SCA, Threat Intelligence, MDM, and Password/Secrets Manager
•Develop baseline security configuration requirements for servers, endpoints, network devices, and cloud environments
•Regularly scan IT infrastructure servers and network devices for vulnerabilities and prioritize identified weaknesses
•Configure and monitor information and cybersecurity tools in cloud infrastructure
•Ensure logs from security control systems are delivered to SIEM
•Define security requirements and technical controls during the planning of new systems, services, and infrastructure changes, applying security-by-design principles
•Automate recurring technical tasks using scripts
•Communicate technically with information and cybersecurity solution vendors
•Respond promptly to cybersecurity incidents and take preventive measures
•Respond quickly to information security events and incidents according to established playbooks and runbooks, and perform initial containment actions
•Participate fully in root cause analysis (RCA) of incidents
•Take corrective and preventive measures to prevent incident recurrence
•Collaborate closely with related teams to contain incidents and restore affected systems promptly
•Prepare cybersecurity incident notifications and reports in accordance with the rules and deadlines established by the National Bank of Georgia
•Participate in developing simulation tests and exercises
•Participate in delivering information security training to company employees
•Inform the manager about current attack methods and emerging threat trends that could harm company systems
•Prepare reports on completed work and present them to the manager
•Perform other related tasks
Requirements
•At least 3 years of experience in cybersecurity engineering or a security-focused IT infrastructure role
•Hands-on experience implementing and operating security controls
•Thorough knowledge of cybersecurity solutions, vendors, protocols, and network and systems infrastructure protection
•Practical knowledge of network and systems infrastructure, including routing, switching, Windows, Linux, VMware, and Active Directory
•Knowledge of hardening and secure configuration for servers, network devices, and endpoints, such as CIS Benchmarks
•Knowledge of scripting and automation
•Analytical thinking, research skills, and attention to detail
•Ability to solve problems quickly and respond promptly
•Good communication skills and ability to handle multiple issues simultaneously
•Teamwork, collaboration, and a continuous improvement mindset
Conditions
No conditions specified in the posting.
