IT Company GNIVC is a partner of state-owned companies and leaders of Russian business, a developer and system integrator of the largest state information systems, as well as commercial solutions for tax monitoring.
- The company is among the TOP-100 best employers in the country and ranks 9th in the "IT companies" category for 2025 according to the hh.ru employer rating among large companies.
- We are in the top 25% for happiness levels among IT companies and companies in Russia in 2025 according to Happy Job.
- We have an AI sandbox – an environment for experiments and real projects using modern open-source large language models. Here you can apply AI to optimize your work, automate processes, and implement your own ideas from hypothesis to result.
- We are an accredited IT company.
We are looking for a specialist who wants to work not only with the support but also with the development of modern protection systems, participate in the implementation of new solutions, and influence the stability of the company's information security processes. This role is suitable for a candidate interested in practical tasks in an enterprise environment, working with MaxPatrol, analyzing security events, optimizing system performance, and interacting with a strong professional community.
Your responsibilities will include:
- Participating in projects for the implementation, development, and improvement of MaxPatrol SIEM/EDR/VM/BAD systems.
- Administering and optimizing the operation of MaxPatrol systems.
- Providing technical maintenance for solutions: updates, backups, monitoring, troubleshooting.
- Analyzing the operation of system components and log files from event sources.
- Interacting with the information security incident response team, network engineers, IT and information security specialists.
- Working with the technical support of the MaxPatrol software manufacturer.
- Preparing reports on system status for information security and IT teams.
- Participating in the development and updating of documentation for MaxPatrol products concerning administration.
What is important to us:
- Higher specialized education in information security or a diploma of professional retraining.
- Understanding of the principles of operation of basic information protection tools.
- Knowledge of Python/Bash/PowerShell for task automation and optimization.
- Experience with SQL and log storage/analysis systems, including Elasticsearch.
- Practical experience in Linux/Windows environments.
- Experience working with Docker.
- Experience using Zabbix/Grafana for analyzing and monitoring system components.
- Experience analyzing log files from event sources.
- Experience administering SIEM/EDR/VM: updates, backups, optimization, monitoring.
Will be a plus:
- Certificates of training and successfully passed qualification exams for SIEM systems, EDR/VM.
- Experience implementing SIEM/EDR/VM systems and vulnerability scanners.
We offer:
- Flexible work formats: possibility of working in the office, on a hybrid schedule, or fully remotely within the Russian Federation.
- Work schedule: five-day work week (Mon-Thu from 09:00 to 18:00, Fri from 09:00 to 16:45).
- Decent compensation: competitive salary based on interview results, as well as bonuses for efficient work and achieved results.
- Official employment: full compliance with the Labor Code of the Russian Federation, including paid leave (with an additional payment of 50% of salary after 11 months of work in the Company) and salary payment twice a month.
- Health care:
- Compensation for sick leave up to 7 days with full pay equivalent to a working day.
- Voluntary medical insurance (VMI) after the probationary period, with a wide range of leading medical institutions, including quality dentistry.
- Reimbursement of up to 50% of sports activity costs.
- Development and training:
- Professional training and certification at the company's expense.
- Organization of internal and external meetups, hackathons, conferences, seminars, and training sessions.
- Partnership programs for learning foreign languages and developing professional skills from Skyeng and Skillbox.
- Access to the corporate library on the Alpina Digital platform.
- Additional days off: the possibility to take 5 additional paid days off (wellness days) during the calendar year (from January 1 to December 31) for employees who have worked in the company for more than 11 months.