As the IT department scales, Wildberries is actively strengthening its Information Security team, creating a reliable and adaptive protection infrastructure. We face unique challenges, from enhancing the security of each individual service to ensuring holistic protection of our entire extensive infrastructure.
We are looking for a SOC Analyst who will design and develop distributed systems for centralized collection, processing, and analysis of events. The analyst will be responsible for ensuring scalable and reproducible detection and response to incidents in the infrastructure of business units within the consolidated group of companies.
More details about the tasks:
- Responding to information security incidents;
- Conducting a full cycle of forensics activities;
- Forming a list of corrective actions, controlling and implementing them based on lessons learned from incidents;
- Developing and maintaining up-to-date incident response playbooks;
- Participating in the process of connecting sources: assessing the completeness of information for incident response.
To do this, you need:
- Skills in identifying and analyzing malware, scripts, and documents;
- Experience with SIEM: ability to build optimal search queries, interpret the results obtained, build visualizations for convenient display and analysis of data;
- Ability to use tools for triage collection and forensics;
- Proficiency in Python/PowerShell/Bash at a level that allows automation of daily tasks;
- Knowledge of one of the systems Linux/Windows/MacOS at a system administrator level;
- Skills in analyzing and processing large volumes of data (logs from hosts, triage, memory dumps/hard drives) with manual and/or automatic correlation between them and identification of significant data.
Will be a plus:
- Experience with ELK stack;
- Knowledge of Kubernetes, Docker, and their monitoring specifics;
- Ability to write simple SQL queries;
- Experience with NTA;
- Holding relevant information security certifications
- Speaking at major conferences and meetups, such as PHDays, OffZone, Standoff, and others.
