vacancy at Sber, Moscow. Salary: 270,000 — 350,000 RUB/month before tax.
Responsibilities
- Deployment and configuration: installation and configuration of EDR management servers, EDR agents on Windows/macOS/Linux hosts in various environments.
- Maintenance: keeping EDR agents up-to-date, performing updates, and managing configurations.
- Diagnostics and troubleshooting: analysis of EDR server and agent logs, identifying causes of failures, and resolving issues.
- Interaction with teams: collaboration with product developers and analysts to improve security settings, as well as assisting internal teams in product setup and operation.
- Handling user requests.
Requirements
- Experience with EDR systems, understanding of EDR solution architecture: basic understanding of system components (agent, server, policies) and interaction principles.
- Proficient Windows/Linux administration, understanding of OS architecture at an administrator level.
- Basic system skills: experience with command line and writing simple scripts (Bash/Python), installation and configuration of EDR agents on Windows/Linux/macOS endpoints.
- Fundamentals of working with databases: knowledge of SQL basics and PostgreSQL administration, building queries for telemetry analysis.
- Understanding of network technologies and protocols: knowledge of the TCP/IP stack, common protocols (HTTP, DNS, DHCP, SSL/TLS), and network troubleshooting skills (Wireshark, tcpdump).
- Understanding of how network devices and core IT infrastructure services (DNS, DHCP, VPN, etc.) work.
Will be a plus
- Experience with monitoring and log collection systems: Grafana/Zabbix/WinCollect/Windows Event Collector (WEC).
- Fundamentals of automation and DevOps: understanding of CI/CD concepts and basic knowledge of tools (Git, Ansible).
- Experience with other information security tools (СЗИ): familiarity with firewalls, access control systems, antivirus, or SIEM solutions.
- Fundamentals of working with broker clusters: Kafka.
- Fundamentals of working with load balancers: single-tier/multi-tier. Load balancing methods, etc.
- Fundamentals of working with web servers acting as reverse proxy servers, load balancers, etc.: Nginx, SynGX.
- Fundamentals of working in ticketing systems: ServiceManager and others.
- Instrumental proficiency in AI for analysis, generation, and automation.
Conditions and Benefits
- Comfortable modern office: Moscow, Bolshaya Andronievskaya St., 6.
- Office-based work.
- Annual salary review, annual bonus.
- Corporate gym and recreation areas.
- Over 400 educational programs at SberUniversity for professional and career development.
- Adaptation program and manager support at the start (for Junior positions).
- Extended voluntary medical insurance (DMS), preferential insurance for family members, and a corporate pension program.
- Flexible mortgage loan discount equal to 1/3 of the Central Bank's key rate.
- Free SberPrime+ subscription, discounts on partner company products.
- Referral bonus for recommending friends to the Sber team.