📍 Astana | office / hybrid

We are looking for a Senior SecOps / Threat Hunting / Detection Engineer to develop processes for monitoring, threat detection, and information security incident investigation.

📌 Key Tasks: • Development of Security Monitoring, Detection Engineering, and Threat Hunting processes; • Development and optimization of detection use-cases for SIEM, EDR/XDR, IDS/IPS; • Creation of correlation rules, alert enrichment, and detection pipelines; • Conducting threat hunting and information security incident investigation; • Analysis of IOC, TTP, telemetry data, and attack chain construction; • Identification of signs of persistence, lateral movement, privilege escalation, C2, and credential abuse; • Analysis of network traffic (Wireshark, tcpdump, Zeek, NetFlow/sFlow); • Monitoring completeness of telemetry, centralized logging, and detection coverage; • Preparation of recommendations for improving detection and incident remediation; • Interaction with Infrastructure, DevOps, SOC, and Security teams.

✅ We expect: • 4-5 years of experience in SecOps / SOC / Threat Hunting / Incident Response; • Practical experience with SIEM, EDR/XDR, IDS/IPS, and Threat Intelligence; • Experience with Splunk, ELK, QRadar, Microsoft Sentinel, or similar; • Experience in developing detection logic and correlation rules; • Practical experience in threat hunting and incident investigation; • Deep understanding of MITRE ATT&CK, IOC/TTP analysis, and attacker behavior; • Experience analyzing network, endpoint, authentication, and cloud telemetry; • Basic knowledge of Linux, Windows, networking, and cloud infrastructure; • Python, Bash, or PowerShell skills will be an advantage; • English language — confident reading of technical documentation.

⭐ Will be a plus: • Experience in analyzing malware behavior; • Knowledge of Kubernetes and container security; • Certifications like Security+, GCIH, GCIA, Splunk, Blue Team, etc.

📩 For questions or to apply: recruiter contact