SIEM Engineers Team Lead

BI.ZONE creates IT products for cybersecurity: from mobile applications to complex platforms based on machine learning methods. Thanks to our solutions, the lives of tens of millions of people are becoming better and safer.

We are looking for a SIEM Engineers Team Lead who will be responsible for the development and operation of customer integration infrastructure with SOC, organizing the work of the engineering team, and ensuring the reliability and quality of the provided service.

What you will be doing:

SIEM Infrastructure Development

• Develop the customer integration infrastructure with SOC in terms of SIEM.
• Participate in the formation of the technical roadmap for SIEM infrastructure development.

Team Management

• Organize the work of the SIEM engineers team, set priorities, and monitor task completion.
• Implement and improve customer onboarding and support processes.
• Develop the team: participate in recruitment, evaluation, training, and motivation of employees.

SIEM Operation

• Ensure SLA compliance and stable operation of the SIEM infrastructure.
• Organize the resolution of system problems and prevent their recurrence.
• Interact with customers when resolving complex technical issues.

What is important to us:

Technical Competencies

• Experience in operating and understanding SIEM systems architecture.
• Experience in implementing or developing the architecture of technical solutions.
• Experience in administering Linux and/or Windows Server.
• Experience working with log processing systems (Logstash, rsyslog, syslog-ng, Fluentd, NXLog, or similar).
• Experience in automation using Ansible or similar tools.
• Basic knowledge of SQL and experience working with REST API.

Management Competencies

• Experience in managing an engineering team or acting as a technical lead.
• Experience in organizing team work, prioritization, planning, and task control.
• Experience in employee development: mentoring, performance evaluation.

What else is important to us, but we are ready to consider candidates without it:

• Experience with Prometheus, VictoriaMetrics, Grafana.
• Experience in automation using Python or Bash.
• Experience in implementing CI/CD.

We offer:

Security All guarantees of official employment according to the Labor Code of the Russian Federation and the advantages of an accredited IT company.

Communities Regular professional meetups and meetings for experience sharing. Also, interest-based communities: sports, games, books, anime.

Flexible schedule Nobody monitors when an employee sits down at a computer, how many hours they spend in the office, or how often they work remotely.

Health care Voluntary medical insurance with dental care from the first month of employment with the company.

Training Certification, specialized courses, conferences, meetups, hackathons, CTFs.

Free atmosphere We use informal address ("ты"), no dress code, and no unnecessary bureaucracy.

Self-realization Support for creativity and idea implementation. You can grow professionally and develop your personal brand.

Discounts on fitness, purchases, and more.

Discounts from BestBenefits, «Фитмост», «СберПрайм+» and other partner companies for all employees.

Corporate life Cool internal events and participation in sports competitions, as well as merchandise and gifts.