RuSecJobs Channel

Security Operations Center (SOC) Manager
Компания: Sum&Sub
Локация: Кипр или другие локации, кроме РФ
Формат работы: удалённый, гибкий график
Опыт: от 5-ти лет
Зарплата: 2 500 - 4 000 EUR
Контакт: по всем вопросам: @zhur_an

Responsibilities:
• Development and organization of complex architecture and processes for building SOC.
• Development of SOC operating principles, policies, incident response procedures, incident handling procedures, SOC performance benchmarks.
• Ensuring monitoring and analysis of events, timely detection and prevention of exploitation of vulnerabilities, unwanted actions of internal and external intruders (SIEM).
• Manage employees’ reported incidents.
• Ensuring the identification of vulnerabilities in business applications (SaaS), Windows Terminal Servers and network, AWS infrastructure of Sumsub, preparing reports on the results of identified vulnerabilities, and preparing recommendations for their elimination.
• Collection and analysis of materials (network traffic dumps, disk images, memory dumps, system logs, malware samples).
• Recruitment of personnel according to roles in SOC.

Requirements:
• At least five years of experience in Information Security
• Practical experience with SIEM systems and vulnerability scanners
• Practical experience with logs collection and monitoring, alert and correlation rules development and automation or routine tasks
• Experience in implementing projects to build SOC
• Experience in integrating business applications and existing IT infrastructure with SIEM solutions
• Experience in investigating information security incidents, collecting and storing logs for investigating incidents, identifying and eliminating the causes of incidents
• Knowledge of modern methods of classifying tactics and techniques of attackers, the main vectors of attacks, ways to detect and counter them
• Knowledge and understanding of IT infrastructure security technologies (SIEM, DLP, vulnerability scanners, IDS / IPS, ME, Antiviruses, etc.)
• Understanding of network technologies, typical IT architectures and features of information systems functioning.
Will be a plus:
• Higher education (IT/IS)
• Security+, ITIL Foundation, ISO 27001, CRISC, CISA, CISM, CISSP, CDPSE, OSCP or other InfoSec certifications

What do we offer:

• Registration in a Cyprus company.
• In case of interest to relocate, Company provide the assistance with relocation to Cyprus.
• Probation period 3 months.
• Working in a dynamically growing project.
• Work with a product that is presented on all continents.
• Professional growth and the opportunity to upgrade skills in a high-load project.

Dear applicants, when applying for a vacancy, please indicate your salary expectations

👎27🍌5👍2❤1

3.98K viewsedited 10:15