Чётко описанная роль в крупной цифровой финансовой экосистеме включает важные задачи по защите инфраструктуры и расследованию инцидентов, хотя широкий набор систем может сделать объём работы напряжённым.
?Широкий круг задач
Сильный финтех-домен
Поддержка обучения
Современные инструменты
Мэтч & Сопровод
Покажет вашу совместимость и напишет письмо
Создать профиль и узнать мэтч
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Information Security Engineer (Fintech): Implementing and supporting security systems across SIEM, DLP, WAF, firewalls, IDS/IPS, PAM, EDR, and patch management with an accent on incident detection, vulnerability management, and infrastructure protection. Focus on investigating security events, auditing access rights, analyzing system and application logs, and strengthening web application security across DevOps and infrastructure.
Location: Tashkent, onsite at the employer's location
Company
TBC Uzbekistan is a digital financial services ecosystem including TBC Bank Uzbekistan, TBC Business, payme, TBC Nasiya, BILLZ, and TBC Sug‘urta, serving more than 22 million users with a team of 4,000+ people.
What you will do
Implement, configure, and provide technical support for SIEM, DLP, WAF, NGFW/firewalls, IDS/IPS, PAM, EDR, and patch management systems.
Monitor information security events, detect anomalies, investigate incidents, and mitigate their consequences.
Conduct vulnerability scanning and testing, and monitor timely software updates.
Protect infrastructure from unauthorized access and audit access rights and user accounts.
Analyze operating system, network equipment, and application logs to search for potential threats.
Contribute to security policies, internal regulations, web application security across DevOps and infrastructure, and Security Awareness training.
Requirements
3–6 years of relevant experience in information security or network engineering.
Strong knowledge of information security principles, attack vectors, standards, and best practices, including OWASP Top 10, ISO 27001, and CIS Controls.
Excellent knowledge of TCP/IP, the OSI model, routing, DNS, DHCP, VPN, and TLS/SSL.
Practical experience administering NGFW, WAF, and SIEM platforms.
Confident administration skills with Linux/Unix and Windows Server.
Strong analytical and critical-thinking skills, proactivity, responsibility, and the ability to collaborate with system administrators and developers.
Nice to have
Understanding of containerization with Docker/Kubernetes and cloud environments.
Culture & Benefits
Open atmosphere, vibrant team life, no unnecessary bureaucracy or dress code.
Medical insurance with extended coverage after the probation period.
Conference participation coverage, English-course discounts, and access to Coursera and Udemy.
Internal lightning and thunder talks, team-building activities, and sports events.
Class A office in the city center and a multicultural team.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →