Product Security Engineer

Come on board with Neo Group! Here's your chance to stir things up in the scene with us. We're not just expanding; we're revolutionizing the entire game, mastering profitability with every new venture. But you know what truly fuels our drive? It's people like you. Neo Group is on the lookout for a Product Security Engineer to join our Engineering Team. Responsibilities:

Provide expert security guidance throughout all phases of the Software Development Life Cycle (SDLC) to product development teams and business leadersLead secure SDLC initiatives, including reviewing system architectures, supporting automated security tools, and conducting threat modeling and penetration testingManage the Vulnerability Management process:

identify, triage, and oversee the resolution of security vulnerabilitiesDesign, build, automate, and maintain a suite of internal security tools to support ongoing security operationsPerform technical security reviews and analyses of proposed technical solutions to determine security impact and recommend security controlsConduct independent internal reviews of security controls and information systems to ensure compliance with established policies and best practicesProvide clear and detailed overviews of the audit process, executing cybersecurity audits across various company departmentsWrite comprehensive reports for stakeholders, explaining security processes and recommendations in accessible languageDevelop and monitor key security metrics to assess the effectiveness of security measures implementedRequirementsProven experience in conducting penetration testing and scoping security tests for various servicesHands-on experience facilitating threat modeling sessions with engineering and product teamsKnowledge of selecting, implementing, and maintaining advanced security products and servicesProficiency in automation scripting with popular languages such as Python, PowerShell, Ruby, or similarSolid understanding of cryptography, authentication, and authorization protocolsExperience in managing security incidents, including developing incident response strategies, conducting post-mortem analysis, and implementing preventative measuresStrong collaboration and communication skills, capable of explaining complex security issues to non-technical stakeholdersCommitment to continuous professional development in the cybersecurity fieldProficiency in English and Russian, written and verbalDesirable Skills:

Problem-solving aptitude and ability to adapt to rapidly changing technology landscapesTeam-oriented mindset with strong interpersonal skills to foster collaboration across various departmentsFamiliarity with key security standards and regulatory requirements (e. g. , ISO 27001, NIST frameworks, GDPR, HIPAA) relevant to the industryBenefitsKick off your birthday month with a bang! Not only do you get heartfelt birthday wishes from your team, but you also enjoy a fully-paid day off. Celebrate your way!Your dedication deserves more than applause.

Depending on your tenure, you can snag up to 1,000€ in gift vouchers and unique souvenirs to mark your milestones with usPrioritize your health with up to 80€ gross per month for wellness activities, and access our on-site gym and sauna. Stay fit, unwind, or both - on us!Invest in your growth with 500€ annually for learning, and sharpen your English skills with free online courses.

We're invested in your future!When you need time off for health reasons, enjoy 5 fully-paid health days, plus additional days off in compliance with Estonian lawsWe support you with the birth of your child with 1000 euros!Delight in extras prescribed vacations, comprehensive post-probation health insurance, annual optical wear reimbursement, free parking, and fun office features like PS5 and massage chairs. Don't forget our lively team-building events - because work should be fun!Having a great birthday on us? Here's 150 euros!