Information Security Team Lead (Blue Team)

Operational Management of the Information Security Team (Blue Team) Supporting the Company’s Internal Infrastructure

• Organize the execution of Information Security processes, including incident management, vulnerability management, and other related processes.
• Organize ongoing support of information security tools and controls within the information security system, including health monitoring, version upgrades, reconfiguration, and other maintenance activities.
• Organize changes to the information security system, including selection, testing, and implementation of information security tools, as well as optimization of Information Security processes.
• Prepare reports and project documentation in the field of Information Security, including policies, procedures, and user-facing articles.
• Collaborate with related departments, including IT, Compliance, Red Team, and other teams, as part of the responsibilities listed above.

Participation in Presales Activities and Projects for Commercial Customers

• Analyze and assess Information Security requests, including Secure SDLC-related topics.
• Participate in calls with prospective customers.
• Analyze customers’ Information Security processes and infrastructure and develop recommendations.
• Participate in the implementation of Information Security processes on customer projects, including the introduction of Secure SDLC practices.

• 4–5 years of experience in operational management of an Information Security team.
• Knowledge of the legislation and regulatory requirements of the Republic of Belarus in the field of information security and cybersecurity.
• Knowledge and practical experience in the following technical areas:
  • TCP/IP protocol stack and related services (DNS, DHCP, HTTP/HTTPS, NAT, etc.);
  • firewalls, NGFW, IDS/IPS, WAF;
  • SIEM platforms;
  • EDR/XDR solutions;
  • vulnerability scanners;
  • Windows and Linux system administration;
  • Secure SDLC principles: threat modeling, secure code review, and basic OWASP practices.
• Higher education in Information Security or IT.
• Strong communication skills and clear verbal communication in Russian and English; English level B2 or higher, considering participation in presales calls.

• Experience working with international Information Security standards and practices, including ISO 27001, SOC 2, GDPR, PCI DSS, and others.
• Motivation, goal orientation, and attention to detail.

• Hybrid work format.
• Periodic presence in the Minsk office is required.

We offer:

• Opportunity for professional self-realization and growth.
• Friendly team.
• 25-days of paid vacation.
• Medical insurance and 100% payment for sick leave.
• Professional training and obtaining certificates at the company's expense.
• Foreign language courses and other corporate programs.
• A variety of corporate events.
• Bonuses in case of wedding or a child’s birth.
• The possibility of remote work from any location.