₽ upon interview

City: Moscow

Work format: Hybrid

Work experience: 2 to 5 years

Field: IT solutions and products

Today, Beeline is a company of change, sensitively responding to market and people's needs. And Beeline is also a team united by common values and a common goal — to be a leader in the telecom and digital markets, providing our clients with the latest products and services, as well as the highest level of service.

Now you have the opportunity to join the Monitoring and Response Center team as an SOC Analyst (L3).

So, your responsibilities will include:

• Development of incident handling scenarios for L1 analysts (Playbooks).
• Control of the completeness and sufficiency of the infrastructure detection logic coverage.
• Minimization of false positive alerts.
• Participation as an escalation level for critical incidents and complex attacks.
• Investigation of non-standard information security incidents using SIEM, analysis of materials (disk images, memory dumps, network traffic dumps, system logs, malware samples, triage copies).
• Participation in the organization and improvement of automated response processes and event collection from sources.
• Participation in the development of new and optimization of existing correlation rules.
• Maintaining a knowledge base within the scope of your work.
• Retrospective threat hunting, not identified by correlation rules (Threat Hunting).
• Formation of reporting documentation within the scope of your work.

We will be happy to consider your candidacy if you have:

• Expert knowledge in understanding modern attacker tactics, techniques, and procedures, attack tools and technologies, current information security threats (Cyber Kill Chain, MITRE ATT&CK, OWASP TOP-10).
• Experience in investigating information security incidents, analyzing logs from various systems, and the ability to interpret them correctly.
• Experience in malware analysis (static and dynamic file analysis).
• Experience working with Linux and Windows operating systems.
• Knowledge of Windows and Linux operating system security concepts.
• Experience in script development (Python, Powershell, Bash).

What we offer:

• A cohesive team of professionals where you can not only successfully implement projects but also gain experience and develop.
• Training, participation in interesting projects, and expansion of professional expertise: we participate in conferences, meetups, publish on Habr, etc.
• A constructive and open work atmosphere.
• Voluntary medical insurance policy serviced in the best clinics.
• Corporate discounts on goods and services from company partners.
• Compensation for your sports expenses (running, football, volleyball, swimming, and yoga) in the amount of 30% of their cost.
• Corporate mobile communication.
• Hybrid work format (2 days a week from the office) at the address: Moscow, 8th Marta str., 10, bldg. 14.

How to start working at Beeline

A convenient hiring process: you will see all information about the vacancy and documents in your personal account.

Application

Submit your application, and if your experience is suitable, the recruiter will contact you to schedule an interview.

Interview

Undergo expert assessment in an interview format and ask questions about the job. A test assignment may be required.

Start of Work

All documents will be available in your personal account — sign them online and start working!