Full remote. Locations: Moscow. Salary: 250,000 — 400,000 ₽/month before taxes, total.
Responsibilities:
- Expertise: Final decisions on complex incidents, disputed classifications, and response scenarios (Tier 3).
- Coordination: Forming IRT, task distribution, response management, blocker escalation.
- Monitoring: Strategy definition, scenario coverage control, identification and elimination of "blind spots".
- Data: Requirements for event sources, logging, normalization, and enrichment.
- Standards: Setting standards for playbooks, documentation, reports, and detection content.
- Development: Leading SOC development initiatives, assessing the effectiveness of changes.
- Mentoring: Adaptation, training, and development of employees, transfer of best practices.
Requirements:
- Higher education (Cybersecurity/IT).
- Work experience in the field of 3+ years.
- Understanding of monitoring methodologies and detection content building.
- Experience in coordinating IRT and incident management.
- Project management and change management skills.
- Experience in mentoring and team development.
- System thinking, responsibility, communication skills.
