Responsibilities

• development of correlation rules/incident detection scenarios for network security devices;
• monitoring and investigation of incidents within SOC L2;
• participation in the development of response scenarios (playbook);
• analysis of identified incidents;
• audit of network infrastructure;
• integration of NTA (Positive PT NAD\Suricata) into SOC.

What we expect from you

• higher technical education;
• fundamental knowledge of Information Security, Linux, Windows, Network;
• experience in administering Cisco network equipment;
• experience in administering firewalls (Cisco, CheckPoint, Palo Alto, Positive, etc.);
• experience working with Windows\Linux systems;
• experience working with 802.1x, Cisco ISE, Huawei NAC;
• ability to analyze security event logs, OS logs, network equipment logs, DBMS logs;
• experience working with SIEM systems.