Infrastructure Security Engineer

You will

• Work directly with the business units to facilitate risk assessment and risk management processes.
• Maintain effective communication and coordination with Exness Technology teams in security-related areas.
• Manage information security controls.
• Enforce compliance with these controls and technology-related regulatory requirements.
• Participate in internal and external audits.
• Handle data loss and fraud prevention, making sure the staff doesn't misuse data.
• Manage personal data protection measures (including GDPR).
• Develop security policies and procedures.
• Review architecture, and implementing operations of IT systems from a security perspective.
• Conduct identity and access management and ensure that only authorized people have access to restricted data and systems, maintaining the least privilege approach.
• Carry out the management of security incidents, including investigations and forensics.
• Process events generated by security tools: WAF, VPN, SIEMr and others.
• Manage and develop onboarding and ongoing security education programs for employees.

What makes you a great fit

• 5 or more years of experience in Information Security or other IT roles.
• Ability to leverage business communication skills to inform, convince, and educate employees to enable practical information security activities and processes.
• Has experience in creating a vulnerability management process taking into account the various technologies used in the company.
• Hands-on experience with modern information protection systems (including Open-source products).
• Background in administering Linux and Windows systems.
• Understanding of security aspects of virtualization, containerization (Docker).
• Familiarity with cryptography foundations, knowledge of X509 standard, and experience with PKI administration.
• Broad-spectrum of technical knowledge in the following areas (the list is not exhaustive): Linux family, Docker, Kubernetes, vSphere, AWS, Vault, LDAP, Cisco ASA, Microsoft Windows AD, SSO, Cisco ISE, Palo Alto.
• Deep knowledge of building security in cloud infrastructure.
• Capability to perform audits, both internal and external.
• Intermediate-level or higher of English.

Nice to have

• General acquaintance with regulatory frameworks and compliance requirements associated with financial services.
• Understanding of ITSM fundamentals and project management.
• Any industry certifications.
• Security forensics experience.

What we offer along the way

• Competitive and attractive compensation.
• Extensive learning opportunities, such as professional training and certifications, soft skills' development, free English courses, and trading workshops.
• Health and life insurance for employees, spouses, and children, including vaccinations, tests, mental health care, and coverage for vision and dental care.
• Generous time off, including 21 days of annual leave and paid sick leave.
• Flight tickets, hotel, or apartment accommodation in Cyprus for your first month, migration support, and legal help for you and your family.
• Education allowance for your children’s school and kindergarten fees.
• Access to our very own sports club with dedicated coaches, free Sanctum Club memberships for you and your spouse, corporate SUPs, jet skis, etc.
• A branded company car with a parking space near the office.
• Outstanding team-building experiences and Exness community gatherings.

Your journey after applying

• First interview with Talent Acquisition Specialist (up to 45 minutes).
• Short online English test (for non-native speakers).
• Technical Interview (1 hour).
• Final interview (1 hour).

The starting salary mentioned is an indicative starting number, and the final amount will depend on the personal tax specifics and level of seniority determined during the interview process. This is the base salary only, and the total compensation will also include the performance-based bonus and benefits/allowances.