Location: Remote (Ukraine)

Your expertise: 

• 4+ years of hands-on experience in IT security, network security, or cybersecurity engineering roles
• Experience with identity and access management (IAM)
• Experience with security policy creation and enforcement
• Hands-on experience conducting or supporting security incident investigations

Proven experience in:

• Implementation of security systems and tools
• Threat analysis and incident response
• Handling vulnerability assessment and audits
• Knowledge of regulatory standards (e.g., ISO 27001, GDPR, NIST)

Strong practical knowledge of:

• Linux / Windows / Unix systems, virtualization, and database administration
• SIEM tools, firewalls, IDS / IPS, Endpoint protection, vulnerability scanners, log analysis
• Understanding of Zero Trust Architecture principles
• Scripting in Bash, PowerShell, or Python (at least one required) Git, network technologies
• Strong motivation to continuously learn and grow professionally

Personal skills:

• Analytical and problem-solving mindset
• High attention to detail
• Strong verbal and written communication skills
• Ability to work independently and collaboratively
• Proactive approach to identifying and solving security issues

Will definitely be a plus: 

• Experience with AWS, Azure, or Google Cloud security framework
• Experience with infrastructure-as-code (e.g., Terraform, Ansible) from a security standpoint
• Experience using MITRE ATT&CK framework for detection or threat modeling
• Relevant certifications (e.g., CompTIA Security+, GSEC)
• Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related field

What’s in it for you?

• Opportunity to deal with top-notch technologies and approaches in a world-leader product company with millions of customers
• Opportunity to make a difference for online privacy, freedom of speech, and net neutrality
• Decent market rate compensation depending on experience and skills
• Developed corporate culture: no micromanagement, culture based on principles of truth, trust, and transparency
• “You build it, you own it” mentality in most contexts
• Support of personal and professional development
  • coverage of costs of external trainings, conferences, professional literature
  • support of experienced colleagues
  • in-house events and trainings
  • regular knowledge sharing in teams
  • English classes and speaking clubs
• Life-balance support
  • truly flexible schedule, no time-tracking at all
  • 25 working days of vacation
  • 5 days of paid sick leave per month (if necessary) without providing a medical certificate
  • generous maternity leave program
• Professionally strong environment, friendly and open atmosphere, ability to influence the product development and recognition for it

You will be involved into: 

• Configure and maintain security systems
• Participate in the design and implementation of secure architectures
• Analyze logs from various sources
• Perform regular security audits (e.g., workstation updates, password policies, AD configuration, patch / vulnerability / antivirus management)
• Monitor system events and respond to incidents
• Remediate security issues using internal and external tools
• Cooperate with other teams to ensure information security and business continuity
• Maintain and develop security-related documentation