SOC Team Lead in Nova Digital

The Ukrainian IT company Nova Digital, which is part of the NOVA group of companies, is a powerful manufacturer of web applications and software for architectures of any complexity and load on them. We create, maintain and constantly improve software products, the convenience of which has already been appreciated by 32 million private and business clients of Nova Poshta. We are expanding our team, so we are currently looking for a SOC Team Lead.

 What will you be doing< /strong>

• Management and coordination of SOC activities to ensure effective monitoring and response to security incidents
• Ensuring 24/7 operation of SOC
• Responsibility for constant monitoring of critical information systems and analysis of network activity in order to prevent potential threats and identify anomalies
• Managing the process of investigating security incidents and ensuring their timely resolution
• Controlling and processing events and security incidents from systems (SIEM, EDR, WAF, etc.), requests from employees or customers
• Establish and improve incident response procedures and protocols and ensure compliance with internal policies and external regulatory requirements
• Collaborate with other departments to ensure of the overall information security of the organization
• Supporting the professional development of the SOC team, providing them with knowledge about new threats and security technologies
• Tracking changes in legislation and information security standards, adapting SOC processes in accordance with new requirements< /li>
• Preparation of regular reports on the state of information security and SOC activities for the management of the organization
• Responsibility for the implementation of automated solutions for the performance of regular tasks of the department

About you

• Education: Higher education in the field of information security, information technology or related disciplines
• Experience in the field of information security from 5 years. At least 2 years of experience managing a SOC team or a similar unit
• In-depth understanding of information security, network security and protection technologies
• In-depth knowledge of Advanced Persistent Threats (APT) tactics, techniques and methods< /li>
• Deep understanding of tactics, techniques and methods of possible attacks (Phishing, Spoofing, Malware, DDoS, Injection, Web attacks, etc.)
• Skills and experience in implementing and administering systems for monitoring and managing security incidents such as: SIEM, IDS/IPS, WAF, EDR, DLP, Sandboxing, Threat intelligence, etc.)
• Skills in investigating security incidents and managing their response processes
• Experience in writing scripts for task automation (for example, in Python, Bash, PowerShell)
• Knowledge of basic standards and regulatory requirements in the field of information security (ISO/IEC 27001, NIST, CIS, NIS 2 Directive)
• Ability to communicate clearly and effectively with various levels of management and technical specialists
• Intermediate or higher English proficiency

Will be an advantage

• Availability of CISSP, CISM, GCIH, CEH certificates or equivalent
• Practical experience of AWS, GCP, Azure

We offer

• Official employment
• Paid vacation
• Medical insurance
• Necessary equipment for work
• li>
• Corporate culture that motivates and charges with positivity
• Working in a socially responsible company that follows trends, appreciates the ideas of employees and develops together with them

Send your resume, let's get to know each other :)