No applications. Teams find and message you directly.
✓ Direct apply: you message the hiring person. No ATS.
MTS Web Services is looking for a Middle Information Security Architect to coordinate and support information security teams, design secure architectures, and ensure compliance with security requirements.
MTS Web Services is looking for a Middle Information Security Architect to coordinate and support information security teams, design secure architectures, and ensure compliance with security requirements.
Responsibilities
- Coordinate and support information security teams in the cluster.
- Design secure architecture – develop protection systems for new and modernized products (modular, microservices, mobile applications, etc.).
- Formulate information security requirements – create protection measures, threat models, and other security requirements.
- Prepare technical specifications for: developing protection functionality in information systems, integrating systems with information protection tools, and purchasing protection tools.
- Control technical debt in information security – monitor and prioritize work to eliminate vulnerabilities.
- Participate in acceptance testing – verify compliance of implemented solutions with information security requirements.
- Control information security processes and secure development – assess compliance of information systems with information security requirements, formulate conclusions and recommendations.
Requirements
- Experience as an architect/expert in information security.
- Knowledge of VDI (Virtual Desktop Infrastructure), MDM (Mobile Device Management).
- Knowledge of attack vectors on web applications, IT infrastructure, virtualization and virtual environments, networks, and understanding the principles of attacks on information systems using vulnerabilities from OWASP-top 10.
- Experience in software development, understanding the main stages of software development, and information system architecture.
- Understanding of CI/CD principles, virtualization, containerization, and orchestration (Docker, Kubernetes, Gitlab, etc.).
- Knowledge of regulatory legal acts in the field of information security, particularly Federal Laws (187-FZ, 152-FZ, etc.), Government Resolutions, orders from FSTEC, FSB, 126-FZ. Knowledge of practices and recommendations in the field of information security (ISO 27001, NIST, CIS).
- Experience in building security systems (information security, cybersecurity) for industrial enterprises (including critical information infrastructure).
✓ Direct apply: you message the hiring person. No ATS.