Endpoint Security Expert

Raiffeisen Bank is the largest Ukrainian bank with foreign capital. For more than 30 years, we have been creating and building the banking system of our country. Raiffeisen employs more than 5,000 employees, including one of the largest product IT teams, which includes 900+ specialists. Every day, we work side by side so that more than 2.5 million of our clients can receive quality service, use the bank’s products and services, and develop their business, because we are #TogetherWithUkraine. Your future responsibilities: Protecting endpoints and workstations against cyber threats Monitoring and responding to endpoint-related security incidents Developing and implementing endpoint security policies Supporting and maintaining network infrastructure for Certificate Authorities (CAs), servers, and their related AWS infrastructure Analyzing and evaluating the adoption/implementation of new technologies Executing routine and standard operational procedures (SOPs) Your skills and experience: Windows OS Administration: cmd, PowerShell, local EventLog analysis, endpoint-level network troubleshooting, understanding of Active Directory (AD), GPO policy management, and troubleshooting cryptographic subsystems and GPOs at the endpoint level Linux OS Administration: understanding system architecture, filesystem hierarchy, file permissions, logging, and core commands macOS Administration: general understanding of core principles, software deployment/installation, and keychain/certificate storage Endpoint Protection Experience: hands-on experience with endpoint detection and protection systems (Microsoft Defender, Zscaler, AppLocker) Proxy Systems Experience: experience working with proxy solutions (Squid, etc.) AWS Experience: core operational principles and services: ALB, NLB, EC2, ACM, IAM, Security Groups/NACLs, VPC, Route 53, and infrastructure monitoring (CloudWatch, CloudTrail) Experience working with databases: configuring connections, password management, and executing basic queries Knowledge of core information system vulnerabilities: OWASP Top 10 PKI & Cryptography: understanding core operational principles and hands-on experience generating key pairs and CSRs, and working with OpenSSL Security & Certificate Validation Protocols: understanding the working principles of TSP, OCSP, CRL, and TLS/mTLS Network Analysis: proficiency with Wireshark and tcpdump (strong understanding of TCP/IP, DNS, HTTP/HTTPS, routing, and firewall rules) Practical experience using AI tools (log analysis, troubleshooting, working with configurations, writing and analyzing scripts, automating typical operations, and preparing technical documentation) Understanding the principles of safe use of AI (ability to form effective queries, critically check and validate AI results before use) Understanding the risks of using AI in a corporate environment (possibility of information leakage, use of untested code generated by AI, etc.) Will be a plus: …