Инженер по информационной безопасности

About the role

ITMS Russia is seeking an experienced Information Security Engineer to strengthen the protection of its IT infrastructure. You will work closely with DevOps, network, and identity teams to implement robust security controls.

Key responsibilities

• Develop and continuously improve Vulnerability Management processes, from detection to remediation tracking.
• Enhance the security posture of Windows and Linux servers and network devices through hardening best practices.
• Automate security workflows in collaboration with the DevOps team.
• Analyze security incidents, investigate attack vectors, and design preventive measures.
• Contribute to network security by configuring next‑generation firewalls (NGFW) and threat‑detection systems.
• Design and deploy Identity & Access Management solutions, including MFA, PAM, Active Directory, and GPO.

Required profile

• Higher education degree.
• Minimum 4 years of experience in information security with a focus on infrastructure protection.
• Proven experience building Vulnerability Management processes.
• Strong knowledge of Windows, Linux, hardening standards, and modern security frameworks.
• Solid understanding of networking concepts, OSI model, TCP/IP, and segmentation.
• Hands‑on incident response experience, familiarity with EDR tools and the MITRE ATT&CK framework.
• Additional automation experience (Python or Bash) and familiarity with Terraform, Docker, Kubernetes are a plus, as are certifications such as OSCP, CISSP, or CISM.

Required skills

• Vulnerability Management
• Windows hardening
• Linux hardening
• NGFW configuration
• Threat detection
• MFA
• PAM
• Active Directory
• GPO
• Incident response
• EDR
• MITRE ATT&CK
• Python
• Bash
• Terraform
• Docker
• Kubernetes

What we offer

• Official employment with an accredited IT partner.
• Competitive salary plus annual bonus.
• Hybrid work model (office and remote).
• Annual salary indexation.
• Comprehensive health insurance with dental coverage from day one.
• Flexible benefits program (points for marketplace, health, sport, etc.).
• Corporate transport from multiple metro stations.
• Corporate discounts and privileges.
• Opportunities for career growth and professional training.