Information Security Team Lead (Blue Team)

operational management of the information security team (blue team) supporting the company’s internal infrastructure

• organize the execution of information security processes, including incident management, vulnerability management, and other related processes.
• organize ongoing support of information security tools and controls within the information security system, including health monitoring, version upgrades, reconfiguration, and other maintenance activities.
• organize changes to the information security system, including selection, testing, and implementation of information security tools, as well as optimization of information security processes.
• prepare reports and project documentation in the field of information security, including policies, procedures, and user-facing articles.
• collaborate with related departments, including it, compliance, red team, and other teams, as part of the responsibilities listed above.

participation in presales activities and projects for commercial customers

• analyze and assess information security requests, including secure sdlc-related topics.
• participate in calls with prospective customers.
• analyze customers’ information security processes and infrastructure and develop recommendations.
• participate in the implementation of information security processes on customer projects, including the introduction of secure sdlc practices.

• 4–5 years of experience in operational management of an information security team.
• knowledge of the legislation and regulatory requirements of the republic of belarus in the field of information security and cybersecurity.
• knowledge and practical experience in the following technical areas:
  • tcp/ip protocol stack and related services (dns, dhcp, http/https, nat, etc.);
  • firewalls, ngfw, ids/ips, waf;
  • siem platforms;
  • edr/xdr solutions;
  • vulnerability scanners;
  • windows and linux system administration;
  • secure sdlc principles: threat modeling, secure code review, and basic owasp practices.
• higher education in information security or it.
• strong communication skills and clear verbal communication in russian and english; english level b2 or higher, considering participation in presales calls.

• experience working with international information security standards and practices, including iso 27001, soc 2, gdpr, pci dss, and others.
• motivation, goal orientation, and attention to detail.

• hybrid work format.
• periodic presence in the minsk office is required.

we offer:

• opportunity for professional self-realization and growth.
• friendly team.
• 25-days of paid vacation.
• medical insurance and 100% payment for sick leave.
• professional training and obtaining certificates at the company's expense.
• foreign language courses and other corporate programs.
• a variety of corporate events.
• bonuses in case of wedding or a child’s birth.
• the possibility of remote work from any location.