Cybersecurity Engineer

"Neo Georgian Bank" is announcing a vacancy for a Cybersecurity Engineer position.

Information Security Department

Neo Georgian Bank is looking for an experienced and motivated Cybersecurity Engineer to join the protection of the bank's infrastructure, implementation of modern security technologies, and incident response.

Position Purpose:

To protect the company's infrastructure, including computer systems, servers, network, and digital services, from cyber-attacks, data breaches, and unauthorized access by implementing, configuring, operating, and continuously improving security controls and security architecture.

What You Will Do:

Security Controls and Infrastructure

Implement, configure, operate, and continuously improve information and cybersecurity controls to prevent incidents: WAF, DDoS Protection, DLP, PAM, EDR/XDR, Email Protection, Database Firewall, Vulnerability Management, SAST/SCA, Threat Intelligence, MDM, Password/Secrets Manager

Develop baseline security configuration requirements for servers, endpoints, network devices, and cloud environments

Perform regular vulnerability scanning and prioritize identified weaknesses on IT infrastructure servers and network devices

Configure and monitor information and cybersecurity tools for cloud infrastructure

Ensure logs from security controls systems are supplied to SIEM

Define security requirements and technical controls at the planning stage of new systems, services, and infrastructure changes, considering security-by-design principles

Automate repetitive technical tasks using scripts

Technical communication with information and cybersecurity solutions providers

Incident Response:

React immediately and take preventive measures in case of a cybersecurity incident

Rapidly respond to information security events/incidents according to established playbooks/runbooks and implement initial containment actions

Full involvement in Root Cause Analysis (RCA) of incidents

Implement corrective and preventive measures to prevent incident recurrence

Close collaboration with related teams to ensure timely containment and recovery of affected systems

Prepare cybersecurity incident notifications and reports in accordance with the rules and deadlines established by the National Bank of Georgia

Team, Knowledge, and Development:

• Participation in the development of simulation tests and exercises

• Participation in conducting information security trainings for company employees

• Informing management about current attack methods and expected threat trends that may harm the company's systems

• Preparation and submission of reports on work performed to management

• Performing other related tasks.

Who we are looking for:

• At least 3 years of experience in a cybersecurity engineering or security-focused IT infrastructure role

• Practical experience in implementing and operating security controls

• In-depth knowledge of cybersecurity solutions, their manufacturers, protocols, and network and system infrastructure protection

• Practical knowledge of network and system infrastructure (routing, switching, Windows, Linux, VMware, Active Directory) at a level that ensures correct implementation and configuration of security controls

• Knowledge of server, network device, and endpoint hardening and secure configuration (e.g. CIS Benchmarks)

• Knowledge of scripting and automation.

What we value:

• Research and attention to detail, analytical thinking

• Problem-solving skills, speed, and operational efficiency

• Good communication skills, ability to work on multiple issues simultaneously

• Teamwork and collaboration, constant striving for improvement.

Join our team!

If you are interested in this position, please send your resume to the specified email address.