We are strengthening the Security Monitoring & Incident Response direction in cloud infrastructure. We are looking for an engineer to help build detection and response processes, improve monitoring quality, and close "blind spots" in AWS/GKE and the cloud-native stack.
Security is an important part of our business. We create products following the Security by Design principle and protect not only ourselves but also our partners.
Our team is responsible for the security of a huge amount of data, applications, and infrastructure services. We are for modern technologies and automation — we develop solutions and use some of the strongest ML models on the market.
Within the company, we are developing our own Security Operations Center — SOC. Our work is not just about response, but also preventive protection: we design monitoring systems, develop detection rules, analyze attacker behavior, and constantly improve the security level of the entire ecosystem.
Responsibilities
- Design and implement the process of monitoring and responding to cybersecurity incidents in cloud environments (AWS, GKE/Kubernetes).
- Detect, analyze, and manage incidents: triage, investigation, forming conclusions and recommendations, reducing MTTR.
- Develop and improve detection content: correlation rules, alerts, signatures/behavioral scenarios, evaluate effectiveness (precision/recall, noise, coverage).
- Formulate hypotheses based on current attacker techniques (TTPs) in the context of cloud-native and K8s infrastructure.
- Together with Red Team and Threat Hunting, identify blind spots, conduct root cause analysis of incident causes.
- Improve cybersecurity processes through Post Incident Activity.
Requirements
- You have experience in building monitoring and response processes.
- You have excellent knowledge of operating systems, networks, and modern technologies: Kubernetes, cloud platforms.
- You understand the architecture of cloud-native logging and observability tools.
- You have a deep understanding of attacker techniques and experience with offensive tools.
- You have experience developing detection rules.
- You are proficient in Python and one of the scripting languages: Bash, PowerShell, or another.
- You can formulate high-quality hypotheses and evaluate monitoring quality.
- You have English language proficiency at the B1-B2 level.
We offer
- Work in the office or remotely — by agreement.
- Opportunity to work in an accredited IT company.
- Voluntary medical insurance with dentistry, including check-ups, compensation for medication purchases, and preferential insurance terms for family members. Also, accident and illness insurance.
- Career growth: take courses on soft and hard skills, develop with mentor support, and advance your level with a competency matrix and regular reviews.
- Strong community. You will work with experts in your field, share knowledge, speak at conferences, attend meetups, and write articles.
- Online consultations with psychologists, lawyers, financial specialists, and healthy lifestyle experts.
- Compensation for sports club memberships, the T-Sport app for online classes, and team training with colleagues.
- 3 additional days to your vacation — can be used for rest or compensated.
- Special rates on T-Bank products and a wide discount program from partners.
- Competitive salary — we will discuss it during the interview.
