Мэдээллийн аюулгүй байдлын администратор

About the role

The Information Security Administrator will lead daily operations of security controls across the group and its subsidiaries. You will ensure firewalls, IDS/IPS, WAF, DDoS protection, EDR/XDR, DLP, PAM, FIM and NAC solutions remain properly configured, monitored and continuously available.

Key responsibilities

• Manage and configure firewalls, IPS/IDS, WAF, DDoS, EDR/XDR, DLP, PAM, FIM and NAC devices.
• Integrate log sources into Splunk ES, create detection rules, triage alerts and conduct incident response.
• Enforce security baselines, monitor configuration drift and perform regular compliance checks.
• Conduct vulnerability scanning, prioritize patch management and report remediation progress.
• Implement RBAC, joiner/mover/leaver and privileged‑access processes.
• Secure Azure, Microsoft 365 and SaaS environments, and maintain ISO/IEC 27001 and PCI‑DSS controls.
• Develop automation scripts in PowerShell, Python or Bash to streamline repetitive tasks.
• Document runbooks, change management records and produce weekly/monthly security reports.

Required profile

• 5+ years of experience as an information security, network or systems engineer.
• Hands‑on expertise with at least four of the following: firewall, IPS/IDS, WAF, DDoS, EDR/XDR, DLP, PAM, SIEM, FIM.
• Advanced knowledge of Linux and Windows Server hardening.
• Strong understanding of routing, switching, VLAN, VPN, TLS/SSL inspection and proxy technologies.
• Experience with Azure, AWS or Microsoft 365 security configurations.
• Familiarity with ISO/IEC 27001:2022 and PCI‑DSS technical controls.
• Professional English proficiency.

Required skills

• Firewall, IPS/IDS, WAF, DDoS mitigation
• EDR/XDR, DLP, PAM, FIM, NAC
• SIEM (Splunk Enterprise Security)
• Log source integration, detection rule creation, alert triage
• Incident response and evidence collection
• Azure, Microsoft 365, SaaS security settings
• RBAC, privileged‑access management
• Vulnerability scanning and patch management
• Linux and Windows Server hardening
• Routing, switching, VLAN, VPN, TLS/SSL inspection, proxy
• PowerShell, Python, Bash scripting