Head of the monitoring and incident response department in Nova Digital

The Ukrainian IT company Nova Digital, which is part of the NOVA group of companies, is a powerful manufacturer of web applications and software for architectures of any -what complexity and load on them. We create, maintain and constantly improve software products, the convenience of which has already been appreciated by 32 million private and business clients of Nova Poshta. We are expanding our team, so we are currently looking for a Head of the Monitoring and Incident Response Department.

What you will do

• Manage and coordinate SOC activities to ensure effective monitoring and responding to security incidents
• Ensuring round-the-clock SOC operation
• Responsibility for constant monitoring of critical information systems and analysis of network activity in order to prevent potential threats and identify anomalies
• Process management investigation of security incidents and ensuring their timely resolution
• Control and processing of events and security incidents from systems (SIEM, EDR, WAF, etc.), requests from employees or customers
• Creation and improvement of procedures and incident response protocols and ensuring compliance of procedures with internal policies and external regulatory requirements
• Collaboration with other departments to ensure the overall information security of the organization
• Support professional development of the SOC team, providing them with knowledge about new threats and security technologies
• Tracking changes in legislation and information security standards, adaptation of SOC processes in accordance with new requirements
• Preparation of regular reports on the state of information security and SOC activities for the management of the organization
• Responsibility for the implementation of automated solutions for the performance of regular tasks of the department

About you

• Education: Higher education in the field of information security, information technology or related disciplines
• Experience in the field of information security from 5 years. At least 2 years of experience managing a SOC team or a similar unit
• In-depth understanding of information security, network security and protection technologies
• In-depth knowledge of Advanced Persistent Threats (APT) tactics, techniques and methods< /li>
• Deep understanding of tactics, techniques and methods of possible attacks (Phishing, Spoofing, Malware, DDoS, Injection, Web attacks, etc.)
• Skills and experience in implementing and administering systems for monitoring and managing security incidents such as: SIEM, IDS/IPS, WAF, EDR, DLP, Sandboxing, Threat intelligence, etc.)
• Skills in investigating security incidents and managing their response processes
• Experience in writing scripts for task automation (for example, in Python, Bash, PowerShell)
• Knowledge of basic standards and regulatory requirements in the field of information security (ISO/IEC 27001, NIST, CIS, NIS 2 Directive)
• Ability to communicate clearly and effectively with different levels of management and technical specialists
• Intermediate English proficiencylevel (intermediate) or higher

It will be an advantage

• Availability of CISSP, CISM, GCIH, CEH or equivalent
• Hands-on AWS, GCP, Azure experience

We offer

• Official employment
• Paid vacation
• Health insurance
• Necessary equipment for work
• Corporate culture that motivates and charges with positivity
• Working in a socially responsible company that follows trends, appreciates the ideas of employees and develops together with them

Send your resume, let's get to know each other :)