A friendly, breakthrough team is waiting to welcome an Information Security Expert Engineer!
Tasks:
- Participation in the development and evolution of Security Vision product line: SOAR, SIEM, EDR, BAS;
- Deep dive into product expertise and architecture;
- Implementation and configuration of integrations with adjacent systems: SIEM, Antiviruses, Sandboxes, NGFW, DLP, etc.;
- Implementation and configuration of integrations with end devices running Windows, Linux, MacOS;
- Development of playbooks and automation scripts within the Security Vision products;
- Development of correlation and normalization rules, testing and validation of rules in an internal test environment;
- Continuous self-development in new trends, attack techniques and tactics, defense mechanisms, and information security management and control procedures and standards.
- Participation in relevant conferences as a speaker.
- Development of MVP for new product modules;
- Development of technical specifications for task execution by product engineers;
Requirements:
- Higher technical education;
- Minimum three years of experience in Information Security;
- Understanding of current information security trends;
- Understanding of the corporate IT technology stack (network, virtualization, OS, web, databases, containers);
- Experience in implementing and operating security tools (AV, EDR, DLP, FW, VM, and others);
- Experience with SIEM. Ability to analyze security logs of operating systems, equipment, and security tools for information security incidents. Experience in writing playbooks and use-cases;
- Experience with SOAR or independent experience in automating information security tasks using orchestration systems/open-source solutions/in-house development;
- Understanding of the main tactics, techniques, and procedures (TTPs) used by cybercriminals and methods for their detection;
- Knowledge of scripting languages (PowerShell, Python, or similar);
- English language proficiency for reading technical documentation and specialized literature.
Will be a plus if you have:
- Experience with public speaking (conferences, training courses);
- Experience participating in CTFs, solving challenges on HackTheBox, Vulnhub, and other platforms;
- Experience as a SOC analyst (2nd-3rd line);
- Knowledge/experience in computer forensics;
- Familiarity with the legislative framework and international information security standards (ISO 27k, ISO 22301, PCI DSS, Federal Law 152, STO BR, NIST-800-xx);
- Possession of professional certifications (OCSP, CEH, CISSP, etc.).
We offer:
- High income;
- Work in an accredited IT and defense industry company;
- Extended annual leave – 31 days;
- Comprehensive voluntary medical insurance package including dental care and planned/emergency hospitalization from the start of employment, plus a policy for travelers;
- Corporate library for reading e-books and audiobooks;
- Discounts on numerous goods and services, including fitness and foreign languages;
- Strong and experienced leaders, market leaders;
- Work in a young and passionate team;
- Comfortable office, tea, coffee, fruits, sweets;
- Flexible start time (9-11 AM);
- Opportunities for professional and career growth.
