SOC Engineer in Raiffeisen Bank

We are Raiffeisen Bank Ukraine, a Ukrainian bank. We have been creating and building the banking system of our country for 30 years. We were and are one of the largest banks in the country, a reliable shoulder for millions of Ukrainians.

Raiffeisen Bank works as a universal bank, providing a wide range of financial services to various client segments - retail and corporate clients, small and medium-sized businesses, financial institutions.

Our priority is impeccable service quality. We seek to strengthen our competitive advantage by innovating, seeking and exploiting new opportunities. We are focused on values ​​that are a clear guide for action. More than 5,000 employees and nearly 3 million customers are in the spotlight. #Райфкоманда integrates the principles of diversity, equality and inclusivity into everyday work. Combining the principles of people-centeredness and innovation at work is our way.

Become a part of the #Raifkommando.

What to do:

• Organization of the internal SOC of the Bank
• processes of log management, monitoring and information security incident management
• development of monitoring scenarios
• administration of monitoring and log management systems

What is required:

• administrative and ELK stack analyst knowledge
• knowledge of logging and monitoring tools and services AWS (CloudTrail, CloudWatch, VPC Flow Logs, AWS Security Hub, etc.)
• administrative and analytical knowledge of the ArcSight product line (ArcSight ESM 7.X, ArcSight Logger 7.X, ArcSight Command Center 2.X ),
• development and administration of ArcSight connectors
• knowledge at the level of a Splunk analyst - knowledge of tactics, techniques and procedures according to MITER ATT&CK
• knowledge at the level of a syslog administrator, windows event log collector - basics of Linux, Windows operating systems, principles of operation of switching equipment and basic security tools (IPS/HIPS, FW, WAF, Proxy, AV, DLP, IDM)
• basics of SQL, regex, scripts languages ​​(Python)
• knowledge of the basics of Threat Intelligence (MISP)
• principles of organizing information security monitoring and incident management (use cases, rulebooks/playbooks, response procedures)

We offer

Work experience in a large systemic international business: work in a large international company that creates a diverse and inclusive environment for professional and personal development of employees.

Stable income: competitive salary and bonuses for your personal contribution, reward for participation in the referral program.

Convenient and safe working format: flexible conditions, the possibility to work in a hybrid model (remote and in the office).

Social package and Wellbeing program: 28 days of paid basic leave and additional vacations, health insurance, official employment. Mental and physical health care: individual psychological sessions and group lectures, free online sports classes.

Professional development: knowledge sharingand with colleagues, including from abroad, the possibility of professional development and retraining. Participation in internal selections. Learning is internal and external. Corporate courses and soft skills training in our corporate academy. Team-building events and participation in social projects.