Architect of Information Security

Information Security Architect at MTS in Moscow. Responsibilities include coordinating security teams, designing secure architectures, and forming security requirements. Salary discussed at interview.

Responsibilities: • Coordinate and support teams on information security issues in the cluster; • Design secure architecture – develop protection systems for new and modernized products (modular, microservices, mobile applications, etc.); • Form information security requirements – create protection measures, private threat models, and other security requirements; • Prepare technical specifications for: development of protection functionality in information systems, integration of systems with information protection means, and procurement of protection means; • Control technical debt in information security – monitor and prioritize work to eliminate weaknesses; • Participate in acceptance tests – verify compliance of implemented solutions with information security requirements; • Control information security and secure development processes – assess compliance of information systems with information security requirements, form conclusions and recommendations.

Expectations: • Knowledge of VDI (Virtual Desktop Infrastructure), MDM (Mobile Device Management); • Knowledge of attack vectors on web applications, IT infrastructure, virtualization and virtual environments, networks, and understanding of attack principles on information systems using OWASP Top 10 vulnerabilities; • Experience in software development, understanding of main software development stages, information system architecture; • Understanding of CI/CD principles, virtualization, containerization, and orchestration (Docker, Kubernetes, GitLab, etc.); • Knowledge of regulatory legal acts in information security, in particular Federal Laws (187-FZ, 152-FZ, etc.), Government Resolutions, orders of FSTEC, FSB, 126-FZ. Knowledge of practices and recommendations in information security (ISO 27001, NIST, CIS); • Experience in building security systems (IS, CB) for industrial enterprises (including critical information infrastructure).

Salary discussed at interview. Office location in Moscow.