Responsibilities:
Integration and Setup
- Integration and configuration of the platform for working with machine data and related components (OpenSearch, Logstash, OpenSearch Dashboards, Beats, Kafka, ClickHouse, PostgreSQL).
- Connecting and parsing new data sources, analyzing and processing event streams.
- Development and adaptation of correlation rules and dashboards.
- Preparation of technical documentation and test plans.
Technical Support
- System maintenance for customers.
- In-depth diagnostics, localization, and problem-solving on the platform and integration side.
R&D and Product Development
- Testing new patches and functionality before deployment to clients.
- Engineering and analytical support in the development of new system modules.
- Design and implementation of threat detection scenarios.
Requirements:
Technical Skills
- Understanding of networking fundamentals (TCP/IP model, DNS, HTTP/S, routing principles).
- Confident administration in Linux and Windows environments.
- Basic understanding of DBMS and message brokers.
- Basic automation skills (Bash / Python / PowerShell scripts - choose one).
- Understanding of information security fundamentals and the principles of monitoring and incident analysis systems.
Will be a plus:
- Experience with the OpenSearch / Elasticsearch, Logstash, Kibana / OpenSearch Dashboards stack.
- Practical experience in administering Kafka, ClickHouse, or PostgreSQL.
- Experience with Active Directory, MS Exchange, VMware, network equipment (Cisco, MikroTik, etc.).
- Familiarity with threat detection frameworks and tactics (MITRE ATT&CK, Sigma).
- Participation in system implementation or support projects.
Conditions:
- Official employment according to the Labor Code of the Russian Federation from the first working day;
- Hybrid work format;
- Stable work schedule: 5/2, from 9:00 to 18:00 Moscow time;
- Annual paid leave: 28 calendar days;
- Annual bonuses based on successful project completion;
- Timely salary payment 2 times a month without delays;
- Paid probation period (3 months) with an assigned mentor.
