SOC Senior Security Engineer in RTB House

We are expanding our security team with a talented, motivated and experienced candidate willing to work in partnership with engineers and other technical team leaders.

• Minimum 3 years+ of experience working in a SOC (Security Operations Center), including at least 2 years of experience as a SOC L2
• Skills related to threat analysis and incident response - proficiency in identifying, analyzing and responding to complex security incidents and the ability to conduct root cause analysis
• Very good knowledge of the Splunk tool, in particular Splunk Enterprise Security, including configuration, creation of alerts, dashboards and integration of new data sources (min. 2 years + experience working with Splunk and Splunk Security) - essential
• Very good knowledge of the SPL language used in Splunk - essential
• Strong understanding of network protocols, including TCP/IP, DNS, DHCP , ICMP…etc.
• Knowledge of the Linux operating system at a level that allows you to freely navigate the system
• Ability to write scripts (Python and/or Bash) to automate security processes
• Knowledge security frameworks/standards (NIST, ISO 27001, MITER ATT&CK)
• Knowledge of malware analysis
• Proficiency in incident management in accordance with established procedures and the ability to prioritize and triage to ensure timely and effective response
• Experience in mentoring less experienced SOC team members (SOC L1) - crucial

We are expanding our security team with a talented, motivated and experienced candidate willing to work in partnership with engineers and leaders of other technical teams.

,[As a SOC Senior Security Engineer, you will be responsible for analyzing, monitoring and classifying security incidents, as well as configuring SIEM solutions. Your tasks will include integrating new data sources, visualizations, creating queries and building alerts. You will also serve as a mentor for frontline analysts in the SOC.] Vimogi: SIEM, Splunk, Splunk Enterprise Security, Security, Linux, Bash, ISO, NIST, Networks, TCP/IP protocols, DNS, DHCP, Malware, Splunk SOAR Інструменти: Wiki, GIT, Gerrit. Bonus points: Small teams, Flat structure, International projects, Training budget, Free coffee, Bike parking, Shower, Canteen, Startup atmosphere, In-house trainings, No dress code.