Junior Information Security Specialist with Vulnerability Management, Security Platform

Location: Kazakhstan or Ukraine; locations include Almaty, Astana, Dnipro, Kharkiv, Kyiv, Lviv, Odesa, and Remote.KZ, Kazakhstan

Company

hirify.global provides an outsourcing environment for cybersecurity and information security projects.

What you will do

• Review vulnerability scan results, track remediation, and follow up with system owners.
• Prepare responses to client and vendor security questionnaires.
• Assist with risk assessments for tools, vendors, and internal processes.
• Maintain security policies, guidelines, checklists, and audit evidence.
• Support SOC 2 compliance activities by collecting and organizing evidence.
• Monitor security advisories and CVEs and assess their relevance to the environment.

Requirements

• Understanding of cybersecurity concepts, including the CIA triad, vulnerabilities, threats, risk, and access control.
• Familiarity with networking, operating systems, and web application basics.
• Interest in ISO 27001, SOC 2, NIST, and OWASP security frameworks and standards.
• Good written and spoken English required.

Nice to have

• Hands-on experience with Nessus, OpenVAS, or Qualys vulnerability scanners.
• Knowledge of CVSS and vulnerability prioritization.
• Basic scripting skills in Python, PowerShell, or Bash.
• Basic knowledge of AWS, Azure, or GCP.
• Security certifications or courses such as Security+, CEH, or similar.

Culture & Benefits

• Work as part of a medium-sized InfoSec team of 10–20 people.
• Collaborate with experienced security specialists and internal stakeholders.
• Gain hands-on exposure to vulnerability management, compliance support, risk assessment, and security assurance.