• Administration of IB infrastructure virtualization and containerization platforms
• Design, implementation, and operation of the information security control (ISC) environment (AV/EDR, PAM, NGFW/Proxy, IDS/IPS/WAF, NAC, SIEM, Sandbox); maintaining fault tolerance and relevance
• Investigations (forensics): artifact collection, logs/pcap/images, identification of the initial vector, compromise zone, reporting. Development/optimization of correlation rules and content detections for MITRE ATT&CK, development of IR playbooks

What we value:

• Relevant experience of 3+ years (ISC operation + SOC/IR)
• Deep knowledge of networks/protocols, AD/LDAP, PKI; confident Linux/Windows administration
• Practical experience with AV/EDR, PAM, NGFW/Proxy, IDS/IPS/WAF, NAC, SIEM, Sandbox; ability to meet SLAs and coverage
• Investigation experience: log analysis, network analysis, forensics, post-incident activities
• Automation: Python/PowerShell/Bash for routine tasks and reporting; SQL for selections/metrics
• Experience with virtualization systems (VMware/proxmox/Brest)

We offer: ✅

• Office/hybrid work format
• Special offers for Bank employees - loans, premium cards, corporate discounts
• Corporate sports in Moscow: hockey, football, running