Cybersecurity Engineer

Job Description:
“BDO” CJSC is looking for a Cybersecurity Engineer who will be Monitor, detect, and respond to cyber threats and incidents to ensure the security of the organization’s IT infrastructure and information assets. Analyze security events, support the implementation of security controls, and assist in maintaining compliance with regulatory requirements. Provide actionable insights to management and support ongoing security initiatives.

Job responsibilities
Independently monitor security systems, logs, and alerts to identify and respond to potential threats or incidents.
Take ownership of assigned security services and tools, ensuring their continuous operation, proper configuration, and maintenance
Conduct incident investigations and root cause analyses under the guidance of the Information and Cyber Security Manager.
Support the implementation, configuration, and maintenance of security tools, including firewalls, IDS/IPS, endpoint protection, and SIEM platforms.
Participate actively in security projects, including system upgrades, vulnerability remediation, and new technology implementations.
Perform vulnerability assessments, identify security gaps, and assist in remediation efforts.
Begin mentoring junior staff by providing guidance on daily tasks, security processes, and best practices.
Maintain accurate and detailed documentation of incidents, security events, and system configurations.
Collaborate with IT teams to ensure security controls are implemented according to policy and best practices.
Support security awareness initiatives and assist in employee training programs.
Prepare reports on security events, trends, and recommendations for management review.
Stay updated on emerging cyber threats, vulnerabilities, and industry best practices.
Fulfill additional tasks related to cybersecurity as assigned by the manager.

Required qualifications
Bachelor’s degree in information technology, Cyber Security, Computer Science, or a related field.
Preferred certifications: CEH, Security+, CompTIA Cybersecurity Analyst (CySA+), or other relevant cybersecurity certifications.
2–4 years of professional experience in cybersecurity, incident response, or related IT security functions
Knowledge of network security principles, firewalls, VPNs, IDS/IPS, endpoint protection, and SIEM platforms.
Experience with vulnerability assessment tools and basic threat intelligence.
Familiarity with identity and access management systems (Active Directory, MFA, RBAC).
Understanding of cloud security fundamentals (Microsoft 365, Azure, AWS).
Knowledge of regulatory compliance frameworks (GDPR, PCI-DSS, HIPAA, or local equivalents).
Basic scripting or automation skills for security monitoring (Python, PowerShell, Bash) are a plus.
Proficiency in Microsoft Office applications (Word, Excel, PowerPoint).
Good command of English (Speaking/Writing)
Russian language knowledge is considered an advantage
Effective communication skills (written/verbal): Ability to convey ideas clearly, constructive feedback, active listening skills
Ability to remain organized during critical workflows
Teamwork
Time management
Analytical and logical thinking
Attention to detail
Sense of Responsibility

Required candidate level
Mid level

Additional Information: All interested candidates are required to send their CVs to [контакты и ссылка отклика — после бесплатной регистрации]․ Indicate the position title you apply for in the subject line of the email.