Security Analyst
Мониторинг, обнаружение и реагирование на инциденты информационной безопасности
Уровень:
Безопасность
18 навыков · 90 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Безопасность приложений | |||||
| OWASP и безопасность приложений | Awareness | Working | Advanced | Expert | Expert |
| Практики безопасного кода | Awareness | Working | Advanced | Expert | Expert |
| SAST/DAST | Awareness | Working | Advanced | Expert | Expert |
| Моделирование угроз | Awareness | Working | Advanced | Expert | Expert |
| Сканирование зависимостей | Awareness | Working | Advanced | Expert | Expert |
| Безопасность инфраструктуры | |||||
| Secrets Management | Awareness | Working | Advanced | Expert | Expert |
| Сетевая безопасность | Awareness | Working | Advanced | Expert | Expert |
| Безопасность облачной инфраструктуры | Awareness | Working | Advanced | Expert | Expert |
| Безопасность Kubernetes | Awareness | Working | Advanced | Expert | Expert |
| Аутентификация и авторизация | |||||
| JWT / OAuth2 / OIDC | Awareness | Working | Advanced | Expert | Expert |
| RBAC / ABAC авторизация | Awareness | Working | Advanced | Expert | Expert |
| Комплаенс и соответствие | |||||
| GDPR / 152-ФЗ Compliance | Awareness | Working | Advanced | Expert | Expert |
| SOC2 Compliance | Awareness | Working | Advanced | Expert | Expert |
| PCI DSS | Awareness | Working | Advanced | Expert | Expert |
| Supply Chain Security | |||||
| Supply Chain Security | Awareness | Working | Advanced | Expert | Expert |
| Реагирование на инциденты | |||||
| Процесс реагирования на инциденты | Awareness | Working | Advanced | Expert | Expert |
| Основы цифровой криминалистики | Awareness | Working | Advanced | Expert | Expert |
| Управление уязвимостями | Awareness | Working | Advanced | Expert | Expert |