Back to SearchSenior Security Engineer
Remote in Armenia, & 4 others
Security.Engineering& 9 others
Looking for something else?
Find a vacancy that works for you. Send us your CV to receive a personalized offer.
Find me a job
Choose an option
We are looking for a talented Senior Security Engineer experienced in Cyber/Information/Network/Cloud Security in enterprise environments, with basic knowledge of threat analysis of event data from commercial and open-source infrastructure technology platforms.
Shift rotation is 2 days on, 2 days off, 12 hours, with 11 work hours and 1 hour for rest.
Responsibilities
- Monitor on-prem and AWS infrastructure for attacks, intrusions and unusual, unauthorized or illegal activity
- Oversee identity and access management, including monitoring for abuse of permissions by authorized system users
- Create SIEM and SOAR detection and remediation scenarios, and implement them as rules
- Build, test and update playbooks
- Perform threat hunting and support threat intelligence processes
- Execute other security operations activities alongside security monitoring
- Generate reports for both technical and non-technical staff and stakeholders
- Leverage advanced analytic tools to determine emerging threat patterns and vulnerabilities
Requirements
- 3+ years of experience as a Security Analyst or Security Engineer in enterprise environments
- Knowledge of Internet security, networking protocols and related technologies, including IDS/IPS, firewalls and content filtering
- Familiarity with Network Behavior Analysis tools, anti-malware and packet inspection
- Understanding of Windows, Linux, DB and network device monitoring and logging techniques
- Background in host and network security hardening, common intrusion techniques and risk management concepts
- Basic knowledge of malware detection, intrusion detection and prevention systems
- Hands-on experience with at least one SIEM solution (Splunk, QRadar, ArcSight, LogRhythm, ELK or Wazuh)
- Proficiency in at least one SIRP/SOAR tool (TheHive, Cortex, Phantom, XSOAR or Resilient)
- Capability to work with the following toolset: Splunk ES, CrowdStrike Falcon, WIZ, AWS GuardDuty, Palo Alto XSOAR, Proofpoint
- Excellent command of written and spoken English (B2+ level)
Nice to have
- Experience with AWS
- Background in network security
- Familiarity with firewalls such as F5, Juniper and Check Point
- Exposure to Palo Alto and Cisco firewalls