← к выдаче
Вакансия

Security System Engineer

RedCore6 дн. назад

Коротко

Assesses security monitoring maturity, owns monitoring architecture (data sources, log pipelines, SIEM), designs detection engineering lifecycle, and automates · Needs: 5+ years in cybersecurity including SOC engineering, SIEM, or detection engineering; hands-on with SIEM, EDR/XDR, NDR; knowledge of ISO/IEC 27001, MITRE ATT&CK

Описание от работодателя

We are looking for a Security System Engineer to join our team! Requirements: - 5+ years in cybersecurity, including SOC engineering, SIEM, or detection engineering. - Deep understanding of SOC operations, detection engineering, incident response, threat intelligence, threat hunting, DFIR, and SOC engineering. - Hands-on experience with SIEM, EDR/XDR, NDR, threat intelligence platforms, and incident management systems. - Knowledge of ISO/IEC 27001, MITRE ATT&CK, and SOC maturity models, with experience assessing monitoring maturity and defining a target state and roadmap. - Solid grasp of monitoring architecture: log collection and processing, data quality, and the trade-offs between visibility, cost, and operational load. - Proven experience designing and tuning detections on application and infrastructure telemetry. Responsibilities: - Assess the maturity of the security monitoring function (data sources, pipelines, detections, processes, tooling) against industry good practice and the organization's threat landscape. Turn the findings into a prioritized, evidence-based improvement roadmap. - Own the monitoring architecture: data sources, log pipelines, SIEM/analytics platforms, and their reliability, scalability, and cost. Define standards for log onboarding, normalization, and data quality. - Design and evolve the detection engineering lifecycle: use-case management, coverage analysis, testing and validation, tuning, and retirement. Build detections from available telemetry and relevant threat scenarios, and measure their effectiveness. - Use incident investigations and root cause analysis as inputs for systemic improvements to telemetry and detections. - Automate repetitive monitoring, enrichment, and response tasks, prioritizing by the value they bring to SOC workflows. - Work with the SOC, security, engineering, and infrastructure teams to onboard new services into monitoring by design. Provide technical guidance to SOC analysts. - Maintain architecture and operational documentation so that decisions, integrations, and procedures stay transparent and transferable. Our benefits to you: ☘️An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance and more 🤝🏻Great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset is guaranteed 🧑🏻‍💻Modern corporate equipment based on macOS or Windows and additional equipment are provided 🏖Paid vacations, sick leave, personal events days, days off 💵Referral program — enjoy cooperation with your colleagues and get the bonus 📚Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences 🎯Rewards program for mentoring and coaching colleagues ✈️In-house Travel Service 🦄Multiple internal activities: online platform for employees with quests, gamification, presents and news, clubs for movie / book / pets lovers and more 🎳Other benefits could be added based on your location