Security Analyst
Мониторинг, обнаружение и реагирование на инциденты информационной безопасности
Уровень:
Основы программирования
7 навыков · 35 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Алгоритмы и структуры данных | |||||
| Алгоритмы и сложность | Awareness | Working | Advanced | Expert | Expert |
| Структуры данных | Awareness | Working | Advanced | Expert | Expert |
| ООП и паттерны проектирования | |||||
| Принципы ООП и SOLID | Awareness | Working | Advanced | Expert | Expert |
| Паттерны проектирования | Awareness | Working | Advanced | Expert | Expert |
| Многопоточность и конкурентность | |||||
| Многопоточное программирование | Awareness | Working | Advanced | Expert | Expert |
| Асинхронное программирование | Awareness | Working | Advanced | Expert | Expert |
| Чистый код и рефакторинг | |||||
| Качество кода и рефакторинг | Awareness | Working | Advanced | Expert | Expert |
Backend Development
1 навыков · 5 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Кэширование | |||||
| Redis | Awareness | Working | Advanced | Expert | Expert |
Базы данных
1 навыков · 5 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Реляционные БД | |||||
| PostgreSQL | Awareness | Working | Advanced | Expert | Expert |
API и интеграции
2 навыков · 10 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| REST API | |||||
| REST API Design | Awareness | Working | Advanced | Expert | Expert |
| Управление API | |||||
| Документирование API | Awareness | Working | Advanced | Expert | Expert |
Облако и инфраструктура
4 навыков · 20 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Контейнеризация | |||||
| Docker | Awareness | Working | Advanced | Expert | Expert |
| Kubernetes и оркестрация | |||||
| Kubernetes Core | Awareness | Working | Advanced | Expert | Expert |
| Облачные провайдеры | |||||
| AWS | Awareness | Working | Advanced | Expert | Expert |
| Сети | |||||
| Основы сетей | Awareness | Working | Advanced | Expert | Expert |
DevOps и CI/CD
1 навыков · 5 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| CI/CD | |||||
| GitHub Actions / GitLab CI | Awareness | Working | Advanced | Expert | Expert |
Тестирование и QA
3 навыков · 15 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Unit-тестирование | |||||
| Unit-тестирование | Awareness | Working | Advanced | Expert | Expert |
| Интеграционное тестирование | |||||
| Интеграционное тестирование | Awareness | Working | Advanced | Expert | Expert |
| Специализированное тестирование | |||||
| Security Testing | Awareness | Working | Advanced | Expert | Expert |
Безопасность
18 навыков · 90 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Безопасность приложений | |||||
| OWASP и безопасность приложений | Awareness | Working | Advanced | Expert | Expert |
| SAST/DAST | Awareness | Working | Advanced | Expert | Expert |
| Практики безопасного кода | Awareness | Working | Advanced | Expert | Expert |
| Моделирование угроз | Awareness | Working | Advanced | Expert | Expert |
| Сканирование зависимостей | Awareness | Working | Advanced | Expert | Expert |
| Безопасность инфраструктуры | |||||
| Secrets Management | Awareness | Working | Advanced | Expert | Expert |
| Сетевая безопасность | Awareness | Working | Advanced | Expert | Expert |
| Безопасность облачной инфраструктуры | Awareness | Working | Advanced | Expert | Expert |
| Безопасность Kubernetes | Awareness | Working | Advanced | Expert | Expert |
| Аутентификация и авторизация | |||||
| JWT / OAuth2 / OIDC | Awareness | Working | Advanced | Expert | Expert |
| RBAC / ABAC авторизация | Awareness | Working | Advanced | Expert | Expert |
| Комплаенс и соответствие | |||||
| GDPR / 152-ФЗ Compliance | Awareness | Working | Advanced | Expert | Expert |
| SOC2 Compliance | Awareness | Working | Advanced | Expert | Expert |
| PCI DSS | Awareness | Working | Advanced | Expert | Expert |
| Supply Chain Security | |||||
| Supply Chain Security | Awareness | Working | Advanced | Expert | Expert |
| Реагирование на инциденты | |||||
| Процесс реагирования на инциденты | Awareness | Working | Advanced | Expert | Expert |
| Основы цифровой криминалистики | Awareness | Working | Advanced | Expert | Expert |
| Управление уязвимостями | Awareness | Working | Advanced | Expert | Expert |
AI-ассистированная разработка
3 навыков · 15 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| AI-ассистенты кодирования | |||||
| GitHub Copilot | Awareness | Working | Advanced | Expert | Expert |
| ChatGPT / Claude | Awareness | Working | Advanced | Expert | Expert |
| Prompt Engineering | |||||
| Prompt Engineering для кода | Awareness | Working | Advanced | Expert | Expert |
Архитектура и проектирование
1 навыков · 5 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| System Design | |||||
| Основы System Design | Awareness | Working | Advanced | Expert | Expert |
Observability и мониторинг
5 навыков · 25 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Логирование | |||||
| Структурированное логирование | Awareness | Working | Advanced | Expert | Expert |
| ELK Stack | Awareness | Working | Advanced | Expert | Expert |
| Метрики и мониторинг | |||||
| Prometheus и Grafana | Awareness | Working | Advanced | Expert | Expert |
| Алертинг и on-call | |||||
| SLI / SLO / SLA | Awareness | Working | Advanced | Expert | Expert |
| Управление инцидентами | |||||
| Управление дежурствами | Awareness | Working | Advanced | Expert | Expert |
Контроль версий и коллаборация
2 навыков · 10 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Git и workflow | |||||
| Git Advanced | Awareness | Working | Advanced | Expert | Expert |
| Code Review | |||||
| Code Review | Awareness | Working | Advanced | Expert | Expert |
Документация
3 навыков · 15 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Техническая документация | |||||
| Architecture Documentation | Awareness | Working | Advanced | Expert | Expert |
| Runbook и Playbook Writing | Awareness | Working | Advanced | Expert | Expert |
| Docs-as-Code | |||||
| Diagramming | Awareness | Working | Advanced | Expert | Expert |