SOC L2 Analyst

Yandex pays special attention to the security of its server and network infrastructure, and user environment. A dedicated group handles this, and we are looking for a specialist to strengthen it.

About the team

More about our team

What tasks await you

Monitoring and analysis of information security events You will track security events, respond to them, analyze and investigate them. If necessary — pass information about events to colleagues and involve them to solve problems together.

Creating and refining rules for monitoring and event correlation systems You will need to create new alerts, refine and adjust existing security monitoring, write new automations and modify existing ones.

Detection and analysis of new types of incidents You will identify confirmed security incidents from the event flow and participate in their investigation.

We expect you

• Know modern attack tactics and techniques (MITRE) and ways to detect them
• Understand the structure and principles of operation of Unix and Windows OS
• Can automate work using scripting languages (Bash, Python)
• Have experience administering network infrastructure, firewalls
• Are responsible, attentive, meticulous
• Want to develop and work in a team
• Are capable of acting independently

Will be a plus

• Have worked in a SOC at L1 or L2
• Have experience with web and email proxies and filtering
• Have used AI tools for incident analysis and automation
• Have a higher education in the field of information security
• Can prevent and quickly resolve faults
• Know how to use security scanners Nmap, Nessus
• Have experience with attack detection systems IDS/IPS, HIDS/HIPS
• Have a sense of humor