IT company GNIVC is a partner of state-owned companies and leaders of Russian business, a developer and system integrator of the largest state information systems, as well as commercial solutions for tax monitoring.
- The company is among the TOP-100 best employers in the country and ranks 9th in the "IT Companies" category for 2025 according to the hh.ru employer rating among large companies;
- We are in the top 25% for happiness level among companies in the IT sector and Russia in 2025 according to Happy Job;
- We have an AI sandbox — an environment for experiments and real projects on modern open-source large language models. Here you can apply AI to optimize your work, automate processes, and implement your own ideas from hypothesis to result;
- We are an accredited IT company.
We are looking for a specialist who wants to work not only with the support but also with the development of modern protection systems, participate in the implementation of new solutions, and influence the stability of the company's information security processes. This role will suit a candidate who is interested in practical tasks in an enterprise environment, working with MaxPatrol, analyzing security events, optimizing system performance, and interacting with a strong professional community.
What you will do:
- Participate in projects for the implementation, development, and improvement of MaxPatrol SIEM/EDR/VM/BAD systems;
- Administer and optimize the operation of MaxPatrol systems;
- Provide technical maintenance of solutions: updates, backups, monitoring, troubleshooting;
- Analyze the performance of system components and event source log files;
- Interact with the IB incident response team, network engineers, IT and IB specialists;
- Work with the technical support of MaxPatrol software vendor;
- Prepare system status reports for IB and IT teams;
- Participate in the development and updating of documentation for MaxPatrol products, in terms of administration.
What is important for us:
- Higher specialized education in the field of Information Security or a diploma of professional retraining;
- Understanding of the operating principles of basic information security tools;
- Knowledge of Python/Bash/PowerShell for task automation and optimization;
- Experience with SQL and log storage/analysis systems, including Elasticsearch;
- Practical experience in Linux / Windows environments;
- Experience working with Docker;
- Experience using Zabbix/Grafana for analysis and monitoring of system components;
- Experience in analyzing event source log files;
- Experience in administering SIEM/EDR/VM: updates, backups, optimization, monitoring.
Will be a plus:
- Certificates of training and successfully passed qualification exams for SIEM systems, EDR / VM;
- Experience in implementing SIEM/EDR/VM systems and vulnerability scanners.
We offer:
- flexible work formats: option to work in the office, hybrid schedule, or fully remote within the Russian Federation;
- working hours: five-day work week (Mon-Thu from 09:00 to 18:00, Fri from 09:00 to 16:45);
- decent remuneration: competitive salary based on interview results, as well as bonuses for effective work and achieved results;
- official employment: full compliance with the Labor Code of the Russian Federation, including paid leave (with an additional payment of 50% of the salary after 11 months of work in the Company) and salary payment twice a month;
- health care:
- compensation for sick leave up to 7 days with full payment equivalent to a working day,
- voluntary medical insurance (VMI) upon completion of the probation period, with a wide range of leading medical institutions, including quality dentistry,
- reimbursement of up to 50% of sports expenses;
- development and training:
- professional training and certification at the company's expense,
- organization of internal and external meetups, hackathons, conferences, seminars, and training,
- partnership programs for learning foreign languages and developing professional skills from Skyeng and Skillbox,
- access to the corporate library on the Alpina Digital platform;
- additional days off: possibility to take 5 additional paid days off (resource days) during the calendar year (from January 1 to December 31) for employees who have worked in the company for more than 11 months.
