Employment type: full-time Location: Bishkek, Kyrgyzstan (relocation) Format: office

We are looking for a Head of Cybersecurity Monitoring Center for a large multi-product company, who can create and develop a SOC from scratch: from concept, architecture and processes to team building and operational management.

Tasks: — creation of a cybersecurity monitoring center from scratch; — design of technical architecture: SIEM, EDR, SOAR, data sources and streams; — formation of a service catalog, processes, metrics, SLA/KPI and reporting; — building a team of analysts and engineers; — organization of monitoring processes, incident management, threat intelligence, threat hunting, malware analysis; — coordination of information security incident investigations; — development of use cases, playbooks, runbooks and SOC automation.

What is important: — experience in SOC, preferably in a team lead or management role; — practice of building or scaling a SOC from scratch; — deep understanding of information security event and incident management processes; — experience with SIEM, SOAR, EDR, IRP, ELK; — knowledge of MITRE ATT&CK, kill chain, approaches to threat hunting and incident response; — knowledge of information security tools: NGFW, NTA, XDR, AV, PAM, DLP, WAF, AntiDDoS, Sandbox; — understanding of IT infrastructure: MS AD, Windows, *nix, endpoint protection;

We offer: — Relocation to Bishkek, Kyrgyzstan; — A team of experienced cybersecurity experts; — Competitive salary; — Opportunities for professional development and training;