Information Security: Difference between revisions

From Secure Group Wiki
Jump to navigation Jump to search
No edit summary
No edit summary
 
(32 intermediate revisions by 2 users not shown)
Line 1: Line 1:
Our Systems Administrators are responsible for coordinating computing environments, deploying and documenting routines and projects controlling the service levels of operating systems, databases and networks.
Secure Group is rapidly expanding. Our teams are in continuous motion, and we’re constantly welcoming new people to join our company. The Information Security team needs to keep up with this fast-changing environment and ensure that our company's data is protected by ensuring that all parties have the right access to work safely.


They provide technical support in the use of computer hardware and software and in supporting users by configuring and installing computing resources and systems controlling the security of the computing environment, which is our number one driver.
It's also under the responsibility of the Information Security team to manage the security of our network and servers, monitor activities, establish compliant procedures, and guarantee the protection of our datacenter.


It is under the responsibility of the Systems Administrators to work with the configuration and maintenance of the systems' environment, from performance monitoring and availability of the systems, to the definition and monitoring of system infrastructure's suppliers and to make the configuration and maintenance of backups, performing the installations and configurations of the operating systems.
Advancing in this framework consists of being on the lookout for new threats and finding new ways of safeguarding our company through effective management of processes, methodologies, costs, and policies assuring Secure Group's ability to function and grow as an ethical, compliant, and transparent organization.


In order to progress in our development path and Level Up or Step Up, our System Administrators must:</br>
 
* Meet the criteria of the Level & Step Chart for the chosen path ([[Individual_Contributors|Individual Contributors Path]] or [[Management|Management Path]])
= Progression=
* Score at least a grade 4 in the [[Knowledge_Management#Knowledge_Accountability_Index|KAI]] of the position in order to reach Level 3.</br>
In order to progress in our development path and Level Up or Step Up, our Information Security team must:
* Meet the criteria of the Level & Step Chart for the [[Performance#Individual_Contributors_Levels|Individual Contributors Path]]
* Meet the [[Information_Security#KAI_of_the_framework|KAI]] grade of the framework related to each level
* Demonstrate proficiency in [[Secure Group Knowledge]]
</br>
</br>


= [[Knowledge_Management#Knowledge_Accountability_Index|KAI]] of the position =
<div class="center">
 
= Salary Grid =
<!-- JOB FRAMEWORK -->
All mentioned salary ranges represent the monthly income in Bulgarian Lev after taxes and deductions.
<div class="grid two-columns">
<div class="center">
<div class="">
  <div class="box-header center">
== General Knowledge ==
  </div>
  <div class="box-content framework">
    <div class="center">
{| class="wikitable"
{| class="wikitable"
!rowspan="2"|'''Concepts'''
!colspan="2"|Information Security
|[https://en.wikipedia.org/wiki/Balanced_scorecard Balanced Scorecard]
!colspan="4"|Step
|-
|-
|[https://en.wikipedia.org/wiki/Scrum_(software_development) Scrum]
!rowspan="11"|Level
|-
|-
!rowspan="1"|'''Frameworks'''
!Individual Contributor Path
|[https://en.wikipedia.org/wiki/Scrum_(software_development) Scrum]
!1
!2
!3
!4
|-
|-
!rowspan="14"|'''Softwares/Tools/Platforms - Usage'''
!1
|[https://en.wikipedia.org/wiki/Bamboo_(software) Atlassian Bamboo]
|4.160
|4.310
|4.466
|4.610
|-
|-
|[https://en.wikipedia.org/wiki/Confluence_(software) Atlassian Confluence]
!2
|5.160
|5.310
|5.466
|5.610
|-
|-
|[https://en.wikipedia.org/wiki/Jira_(software) Atlassian Jira]
!3
|6.160
|6.310
|6.466
|6.610
|-
|-
|[https://en.wikipedia.org/wiki/BambooHR BambooHR]
!4
|-
|7.160
|[https://count.ly/ Countly]
|7.310
|-
|7.466
|[https://goharbor.io/ Docker Harbor]
|7.610
|-
|[https://www.gerritcodereview.com/ Gerrit]
|-
|[https://en.wikipedia.org/wiki/Lansweeper Lansweeper]
|-
|[https://www.libib.com/ Libib]
|-
|[https://openstf.io/ OpenSTF]
|-
|[https://en.wikipedia.org/wiki/PRTG_Network_Monitor Paessler PRTG]
|-
|[https://www.small-improvements.com/ Small Improvements]
|-
|[https://en.wikipedia.org/wiki/Tableau_Software Tableau]
|-
|[https://thycotic.com/ Thycotic Passwordbox]
|-
!rowspan="13"|'''Softwares/Tools/Platforms - Configuration'''
|[https://en.wikipedia.org/wiki/Bamboo_(software) Atlassian Bamboo]
|-
|[https://en.wikipedia.org/wiki/Confluence_(software) Atlassian Confluence]
|-
|[https://en.wikipedia.org/wiki/Jira_(software) Atlassian Jira]
|-
|[https://count.ly/ Countly]
|-
|[https://en.wikipedia.org/wiki/Docker_(software) Docker Engine/Container]
|-
|[https://goharbor.io/ Docker Harbor]
|-
|[https://www.gerritcodereview.com/ Gerrit]
|-
|[https://en.wikipedia.org/wiki/Lansweeper Lansweeper]
|-
|[https://en.wikipedia.org/wiki/Microsoft_Dynamics_NAV Microsoft Dynamics Navision]
|-
|[https://openstf.io/ OpenSTF]
|-
|[https://en.wikipedia.org/wiki/PRTG_Network_Monitor Paessler PRTG]
|-
|[https://en.wikipedia.org/wiki/Samsung_Knox Samsung Knox]
|-
|[https://en.wikipedia.org/wiki/Tableau_Software Tableau]
|-
!rowspan="14"|'''Softwares/Tools/Platforms - Server Administration'''
|[https://en.wikipedia.org/wiki/Bamboo_(software) Atlassian Bamboo]
|-
|[https://en.wikipedia.org/wiki/Bitbucket Atlassian Bitbucket]
|-
|[https://en.wikipedia.org/wiki/Confluence_(software) Atlassian Confluence]
|-
|[https://en.wikipedia.org/wiki/Jira_(software) Atlassian Jira]
|-
|[https://count.ly/ Countly]
|-
|[https://en.wikipedia.org/wiki/Docker_(software) Docker Engine/Container]
|-
|[https://goharbor.io/ Docker Harbor]
|-
|[https://www.gerritcodereview.com/ Gerrit]
|-
|[https://en.wikipedia.org/wiki/Lansweeper Lansweeper]
|-
|[https://en.wikipedia.org/wiki/Microsoft_Dynamics_NAV Microsoft Dynamics Navision]
|-
|[https://openstf.io/ OpenSTF]
|-
|[https://en.wikipedia.org/wiki/PRTG_Network_Monitor Paessler PRTG]
|-
|[https://en.wikipedia.org/wiki/Samsung_Knox Samsung Knox]
|-
|-
|[https://xibo.org.uk/ XiboTV]
!5
|8.160
|8.310
|8.466
|8.610
|-
|-
!rowspan="1"|Protocols
!6
|[https://en.wikipedia.org/wiki/Network_File_System NFS]
|9.160
|9.310
|9.466
|9.610
|-
|-
!rowspan="1"|Languages (Idioms)
|Advanced English
|}
|}
  </div>
</div>
</div>
</div>
</div>


<!-- JOB FRAMEWORK -->
= [[Knowledge_Management#Knowledge_Accountability_Index|KAI]] of the framework =
<div class="">
== Extensive Knowledge ==
  <div class="box-header center">
== Specific Knowledge ==
   </div>
   </div>
   <div class="box-content framework">
   <div class="box-content framework">
     <div class="center">
     <div class="center">
{| class="wikitable"
{| class="wikitable" style="text-align:center; font-size:11px; font-family:Arial, Helvetica, sans-serif !important;; background-color:#DEEBFF; color:#222;"
|- style="font-weight:bold; vertical-align:middle; background-color:#EAECF0; color:#172B4D;"
! rowspan="2" | Type
! rowspan="2" | Knowledge Description
! colspan="6" | Minimum Grade to acquire Level X
|- style="font-weight:bold; vertical-align:middle; background-color:#F4F5F7; color:#172B4D;"
| Level 1
| Level 2
| Level 3
| Level 4
| Level 5
| Level 6
|-
|-
!rowspan="1"|'''Concepts'''
| style="font-weight:bold; background-color:#F4F5F7; color:#172B4D; text-align:center;" | Hardware
|[https://en.wikipedia.org/wiki/Version_control Version control via Git]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Supermicro Supermicro Servers]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
!rowspan="1"|'''Hardware'''
| style="font-weight:bold; background-color:#F4F5F7; color:#172B4D; text-align:center;" | Network Devices
|[https://en.wikipedia.org/wiki/Supermicro Supermicro Services]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://mikrotik.com/software Microtik routerOS]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
!rowspan="2"|Languages
| rowspan="3" style="font-weight:bold; background-color:#F4F5F7; color:#172B4D; text-align:center;" | Protocols
|[https://en.wikipedia.org/wiki/Bash_(Unix_shell) Bash Script]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Border_Gateway_Protocol BGP]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/SQL SQL]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/ISCSI iSCSI]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
!rowspan="1"|Network Devices
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Network_File_System NFS]
|[https://mikrotik.com/software Microtik routerOS]
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
!rowspan="2"|Protocols
| style="font-weight:bold; background-color:#F4F5F7; color:#172B4D; text-align:center;" | Frameworks
|[https://en.wikipedia.org/wiki/Border_Gateway_Protocol BGP]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Scrum_(software_development) Scrum]
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/ISCSI iSCSI]
| rowspan="2" style="font-weight:bold; background-color:#F4F5F7; color:#172B4D; text-align:center;" | Programming languages
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Bash_(Unix_shell) Bash Script]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
!rowspan="7"|Softwares/Tools/Platforms - Server Administration
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/SQL SQL]
|[https://en.wikipedia.org/wiki/BlackBerry_Enterprise_Server BlackBerry Enterprise Server]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/Windows_Server Microsoft Windows Server]
| rowspan="23" style="font-weight:bold; background-color:#F4F5F7; color:#172B4D; text-align:center;" | Software/Tools/Platforms - Configuration
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Bamboo_(software) Atlassian Bamboo]
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/Microsoft_Exchange_Server MS Exchange]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Confluence_(software) Atlassian Confluence]
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/MySQL MySQL]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Jira_(software) Atlassian Jira]
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/Nexenta_Systems Nexenta]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/BlackBerry_Enterprise_Server BlackBerry Enterprise Server]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://www.sophos.com/en-us/products/unified-threat-management.aspx Sophos UTM ]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://count.ly/ Countly]
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://www.vmware.com/products/vcenter-server.html VMWare Vcenter]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Digium Digium Switchvox]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
!rowspan="8"|Softwares/Tools/Platforms - Usage
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Docker_(software) Docker Engine/Container]
|[https://en.wikipedia.org/wiki/BlackBerry_Enterprise_Server BlackBerry Enterprise Server]
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/Microsoft_SQL_Server Microsoft SQL]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://goharbor.io/ Docker Harbor]
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/Windows_Server Microsoft Windows Server]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://www.gerritcodereview.com/ Gerrit]
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/Microsoft_Exchange_Server MS Exchange]
| style="background-color:#FFF; color:#172B4D; text-align:left;" | [https://www.idaptive.com/ Idaptive]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/MySQL MySQL]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Lansweeper Lansweeper]
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/Nexenta_Systems Nexenta]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Microsoft_Dynamics_NAV Microsoft Dynamics Navision]
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://www.sophos.com/en-us/products/unified-threat-management.aspx Sophos UTM ]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Windows_Server Microsoft Windows Server]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://www.vmware.com/products/vcenter-server.html VMWare Vcenter]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Microsoft_Exchange_Server MS Exchange]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
!rowspan="12"|Softwares/Tools/Platforms - Configuration
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/MySQL MySQL]
|[https://en.wikipedia.org/wiki/BlackBerry_Enterprise_Server BlackBerry Enterprise Server]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/Digium Digium Switchvox]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Nextcloud Nextcloud]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/MySQL MySQL]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/PRTG_Network_Monitor Paessler PRTG]
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/Windows_Server Microsoft Windows Server]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Samsung_Knox Samsung Knox]
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/Microsoft_Exchange_Server MS Exchange]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Snapt_Inc Snapt Load Balancer]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/Nexenta_Systems Nexenta]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://www.sophos.com/en-us/products/unified-threat-management.aspx Sophos UTM]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/Nextcloud Nextcloud]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://www.spamtitan.com/ SpamTitan]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/Snapt_Inc Snapt Load Balancer]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Veeam_Backup_%26_Replication Veeam Backup]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://www.sophos.com/en-us/products/unified-threat-management.aspx Sophos UTM]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://www.vmware.com/products/vcenter-server.html VMWare Vcenter]
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://www.spamtitan.com/ SpamTitan]
| rowspan="20" style="font-weight:bold; background-color:#F4F5F7; color:#172B4D; text-align:center;" | Software/Tools/Platforms - Server Administration
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Bamboo_(software) Atlassian Bamboo]
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://en.wikipedia.org/wiki/Veeam_Backup_%26_Replication Veeam Backup]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Bitbucket Atlassian Bitbucket]
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|[https://www.vmware.com/products/vcenter-server.html VMWare Vcenter]
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Confluence_(software) Atlassian Confluence]
|}
| style="background-color:#FFFAE5;" | Limited experience
  </div>
| style="background-color:#FFFAE5;" | Limited experience
  </div>
| style="background-color:#E3FCEF;" | Practical application
</div>
| Applied theory
</div>
| Applied theory
 
| Applied theory
<!-- JOB FRAMEWORK -->
<div class="">
  <div class="box-header center">
= Secure Group Knowledge =
The first item we require proficiency regarding our company is the '''Secure Group Management Model''' (yes, the content in this wiki!). Besides that, we also need our employees to understand our products in all aspects as described in the following table:
  </div>
  <div class="box-content framework">
    <div class="center">
{| class="wikitable"
!colspan="1"|Secure Group Knowledge
!rowspan="1"|What's Expected
!rowspan="1"|Impact
!rowspan="1"|Product
!colspan="1"|Minimum Grade
|-
|-
!rowspan="6"|User Documentation
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Jira_(software) Atlassian Jira]
|rowspan="6"|Good, user-level knowledge regarding the product and its functionalities. From the user documentation, all employees across the company are required to be well aware of our solutions’ core features and functions such as the Password Advisor or how to send an automatic crash report.
| style="background-color:#FFFAE5;" | Limited experience
|rowspan="6"|This knowledge helps us facilitate a user-centric approach internally, which we believe is essential to develop our business and solutions. The user documentation helps team members understand user behavior and needs more thoroughly and feel the impact of their everyday efforts.
| style="background-color:#FFFAE5;" | Limited experience
|Secure OS
| style="background-color:#E3FCEF;" | Practical application
|4
| Applied theory
| Applied theory
| Applied theory
|-
|-
|SAS
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/BlackBerry_Enterprise_Server BlackBerry Enterprise Server]
|4
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|Secure Chat
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://count.ly/ Countly]
|4
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|Secure Email
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Docker_(software) Docker Engine/Container]
|4
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|Secure Vault
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://goharbor.io/ Docker Harbor]
|4
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|Secure Manager
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://www.gerritcodereview.com/ Gerrit]
|4
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
!rowspan="6"|Sales Documentation
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Lansweeper Lansweeper]
|rowspan="6"|Employees should gain significant knowledge regarding the business side of '''Secure Group'''. They need to be aware of commonly used concepts in our day-to-day activities such as our business and distribution model, value proposition, selling prices, key selling points, and target audience.
| style="background-color:#FFFAE5;" | Limited experience
|rowspan="6"|The information in the Sales Documentation supports employees in their daily routine. It conveys the overall business vision within the company. This documentation contributes to making employees aware of how our solutions are distributed, who are our key partners and target market to know exactly the people towards whom team members’ efforts should be aimed. Alignment on company-wide priorities is also achieved through clear communication of our value proposition and key selling points, helping everyone understand the things that matter most.
| style="background-color:#FFFAE5;" | Limited experience
|Secure OS
| style="background-color:#E3FCEF;" | Practical application
|3
| Applied theory
| Applied theory
| Applied theory
|-
|-
|SAS
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Microsoft_Dynamics_NAV Microsoft Dynamics Navision]
|3
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|Secure Chat
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Windows_Server Microsoft Windows Server]
|3
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|Secure Email
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Microsoft_Exchange_Server MS Exchange]
|3
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|Secure Vault
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/MySQL MySQL]
|3
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|Secure Manager
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Nexenta_Systems Nexenta]
|3
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
!rowspan="6"|Support Documentation
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/PRTG_Network_Monitor Paessler PRTG]
|rowspan="6"|People within the company need to be aware of commonly occurring problems with our solutions. From the Support Documentation, employees should also extract general level knowledge regarding support processes, the issues that we’re currently having product-wise, and the approach to troubleshooting them.
| style="background-color:#FFFAE5;" | Limited experience
|rowspan="6"|o The Support Documentation helps employees understand short-term priorities more clearly and communicate more openly why they’re needed. It also gives them general knowledge of how to spot and report a problem, which helps us facilitate a company-wide contribution to product development. Last but by no means least, it helps team members understand customers pains and behavioral patterns to strengthen our user-centric approach.
| style="background-color:#FFFAE5;" | Limited experience
|Secure OS
| style="background-color:#E3FCEF;" | Practical application
|3
| Applied theory
| Applied theory
| Applied theory
|-
|-
|SAS
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://en.wikipedia.org/wiki/Samsung_Knox Samsung Knox]
|3
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|-
|-
|Secure Chat
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://www.sophos.com/en-us/products/unified-threat-management.aspx Sophos UTM]
|3
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|Secure Email
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://www.vmware.com/products/vcenter-server.html VMWare Vcenter]
|3
| style="background-color:#E3FCEF;" | Practical application
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
| Applied theory
|-
|-
|Secure Vault
| style="background-color:#FFF; color:#0052CC; text-align:left;" | [https://xibo.org.uk/ XiboTV]
|3
| style="background-color:#FFFAE5;" | Limited experience
|-
| style="background-color:#FFFAE5;" | Limited experience
|Secure Manager
| style="background-color:#E3FCEF;" | Practical application
|3
| Applied theory
|-
| Applied theory
!rowspan="6"|Functional Documentation
| Applied theory
|rowspan="6"|Through the Functional Documentation, employees should get a thorough understanding of the solutions and their multiple features. People that work closely with the products must understand exactly how they function, how users interact with them, how to configure different settings, and what’s the expected behavior of different software solutions.
|rowspan="6"|o The information in the Functional Documentation helps employees whose work is closely connected with our solutions, to gain significant in-depth knowledge into their functionalities that far exceeds users‘ understanding. Such thorough product expertise helps us remain objective, evaluate market data more adequately, and constantly increase our internal expertise.
|Secure OS
|4
|-
|SAS
|4
|-
|Secure Chat
|4
|-
|Secure Email
|4
|-
|Secure Vault
|4
|-
|Secure Manager
|4
|-
!rowspan="6"|Technical Documentation
|rowspan="6"|Employees concerned with the Technical Documentation and more concretely - software development, must gain complete mastery over all solutions. Such people are regarded as technical experts and need to be well aware of data structures, relational databases, algorithms, programming languages, models, etc.
|rowspan="6"|The Technical Documentation is used to make sure people that are technically involved in product development have the required knowledge to perform their day-to-day tasks, optimize our solutions more easily, and support other teams with their in-depth expertise.
|Secure OS
|4
|-
|SAS
|4
|-
|Secure Chat
|4
|-
|Secure Email
|4
|-
|Secure Vault
|4
|-
|Secure Manager
|4
|-
|-
| style="font-weight:bold; background-color:#F4F5F7; color:#172B4D; text-align:center;" | Languages (idioms)
| style="background-color:#FFF; color:#172B4D; text-align:left;" | Advanced Business English
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#FFFAE5;" | Limited experience
| style="background-color:#E3FCEF;" | Practical application
| Applied theory
| Applied theory
| Applied theory
|}
|}
 
  </div>
= Salary Grid =
  </div>
{| class="wikitable"
</div>
!colspan="3"|System Administration
</div>
!colspan="4"|Step
|-
!rowspan="11"|Level
|-
!Individual Contributor Path
!Management Path
!1
!2
!3
!4
|-
!1: System Administrator
!-
|1.800 lv
|1.950 lv
|2.100 lv
|2.250 lv
|-
!2: Sr. System Administrator
!-
|2.800 lv
|2.950 lv
|3.100 lv
|3.250 lv
|-
!3: Network Engineer
!Manager
|3.800 lv
|3.950 lv
|4.100 lv
|4.250 lv
|-
!4: Sr. Network Engineer
!Sr. Manager
|4.800 lv
|4.950 lv
|5.100 lv
|5.250 lv
|-
!5: Network Architect
!Head of
|5.800 lv
|5.950 lv
|6.100 lv
|6.250 lv
|-
!6: Sr. Network Architect
!Director
|6.800 lv
|6.950 lv
|7.100 lv
|7.250 lv
|-
!colspan="2"|Sr. Director
|9.000 lv
|9.400 lv
|9.800 lv
|10.200 lv
|-
!colspan="2"|Chief of
|11.200 lv
|11.600 lv
|12.000 lv
|12.400 lv
|-
!colspan="2"|VP
|13.400 lv
|13.800 lv
|14.200 lv
|14.600 lv
|}

Latest revision as of 12:04, 18 April 2022

Secure Group is rapidly expanding. Our teams are in continuous motion, and we’re constantly welcoming new people to join our company. The Information Security team needs to keep up with this fast-changing environment and ensure that our company's data is protected by ensuring that all parties have the right access to work safely.

It's also under the responsibility of the Information Security team to manage the security of our network and servers, monitor activities, establish compliant procedures, and guarantee the protection of our datacenter.

Advancing in this framework consists of being on the lookout for new threats and finding new ways of safeguarding our company through effective management of processes, methodologies, costs, and policies assuring Secure Group's ability to function and grow as an ethical, compliant, and transparent organization.


Progression

In order to progress in our development path and Level Up or Step Up, our Information Security team must:


Salary Grid

All mentioned salary ranges represent the monthly income in Bulgarian Lev after taxes and deductions.

Information Security Step
Level
Individual Contributor Path 1 2 3 4
1 4.160 4.310 4.466 4.610
2 5.160 5.310 5.466 5.610
3 6.160 6.310 6.466 6.610
4 7.160 7.310 7.466 7.610
5 8.160 8.310 8.466 8.610
6 9.160 9.310 9.466 9.610

KAI of the framework

Extensive Knowledge

Type Knowledge Description Minimum Grade to acquire Level X
Level 1 Level 2 Level 3 Level 4 Level 5 Level 6
Hardware Supermicro Servers Practical application Practical application Applied theory Applied theory Applied theory Applied theory
Network Devices Microtik routerOS Practical application Practical application Applied theory Applied theory Applied theory Applied theory
Protocols BGP Practical application Practical application Applied theory Applied theory Applied theory Applied theory
iSCSI Practical application Practical application Applied theory Applied theory Applied theory Applied theory
NFS Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Frameworks Scrum Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Programming languages Bash Script Practical application Practical application Applied theory Applied theory Applied theory Applied theory
SQL Practical application Practical application Applied theory Applied theory Applied theory Applied theory
Software/Tools/Platforms - Configuration Atlassian Bamboo Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Atlassian Confluence Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Atlassian Jira Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
BlackBerry Enterprise Server Practical application Practical application Applied theory Applied theory Applied theory Applied theory
Countly Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Digium Switchvox Practical application Practical application Applied theory Applied theory Applied theory Applied theory
Docker Engine/Container Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Docker Harbor Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Gerrit Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Idaptive Practical application Practical application Applied theory Applied theory Applied theory Applied theory
Lansweeper Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Microsoft Dynamics Navision Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Microsoft Windows Server Practical application Practical application Applied theory Applied theory Applied theory Applied theory
MS Exchange Practical application Practical application Applied theory Applied theory Applied theory Applied theory
MySQL Practical application Practical application Applied theory Applied theory Applied theory Applied theory
Nextcloud Practical application Practical application Applied theory Applied theory Applied theory Applied theory
Paessler PRTG Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Samsung Knox Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Snapt Load Balancer Practical application Practical application Applied theory Applied theory Applied theory Applied theory
Sophos UTM Practical application Practical application Applied theory Applied theory Applied theory Applied theory
SpamTitan Practical application Practical application Applied theory Applied theory Applied theory Applied theory
Veeam Backup Practical application Practical application Applied theory Applied theory Applied theory Applied theory
VMWare Vcenter Practical application Practical application Applied theory Applied theory Applied theory Applied theory
Software/Tools/Platforms - Server Administration Atlassian Bamboo Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Atlassian Bitbucket Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Atlassian Confluence Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Atlassian Jira Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
BlackBerry Enterprise Server Practical application Practical application Applied theory Applied theory Applied theory Applied theory
Countly Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Docker Engine/Container Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Docker Harbor Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Gerrit Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Lansweeper Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Microsoft Dynamics Navision Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Microsoft Windows Server Practical application Practical application Applied theory Applied theory Applied theory Applied theory
MS Exchange Practical application Practical application Applied theory Applied theory Applied theory Applied theory
MySQL Practical application Practical application Applied theory Applied theory Applied theory Applied theory
Nexenta Practical application Practical application Applied theory Applied theory Applied theory Applied theory
Paessler PRTG Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Samsung Knox Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Sophos UTM Practical application Practical application Applied theory Applied theory Applied theory Applied theory
VMWare Vcenter Practical application Practical application Applied theory Applied theory Applied theory Applied theory
XiboTV Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Languages (idioms) Advanced Business English Limited experience Limited experience Practical application Applied theory Applied theory Applied theory
Retrieved from "https://managementmodel.info/index.php?title=Information_Security&oldid=3352"