Company: "OCTOBANK" JOINT-STOCK COMPANY Address: Furkata 2 Responsibilities: • Round-the-clock (24/7) monitoring of information security events using a SIEM system. • Analysis and primary verification of alerts detected by the SIEM system. • Classification, registration, and escalation of information security incidents. • Participation in detecting phishing attacks, malware, unauthorized access to accounts, DDoS attacks, and other cyber incidents. • Providing necessary information to the Incident Response team for incident investigation. • Preparing reports at the end of each shift. • Working in accordance with internal regulations and standard operating procedures (SOP). Requirements: • Higher education (Information Technology, Information Security, or related fields). • At least 1 year of work experience in information security or IT (graduates without experience are also considered). • Basic knowledge of Windows and Linux operating systems. • Understanding of network protocols TCP/IP, DNS, HTTP/HTTPS, VPN. • General understanding of SIEM systems (IBM QRadar, Splunk, Microsoft Sentinel, ArcSight, Wazuh, etc.). • Skills in working with Active Directory, Windows Event Logs, and Syslog. • Basic knowledge of MITRE ATT&CK and Cyber Kill Chain. • Ability to read technical documentation in English. • Readiness to work in a shift schedule (24/7). Responsible person: Ахмадулина Алина Наильевна
Loading map...
Job listings that might be a good fit for you!
Company: "OCTOBANK" JOINT-STOCK COMPANY Address: Furkata 2 Responsibilities: • Round-the-clock (24/7) monitoring of information security events using a SIEM system. • Analysis and primary verification of alerts detected by the SIEM system. • Classification, registration, and escalation of information security incidents. • Participation in detecting phishing attacks, malware, unauthorized access to accounts, DDoS attacks, and other cyber incidents. • Providing necessary information to the Incident Response team for incident investigation. • Preparing reports at the end of each shift. • Working in accordance with internal regulations and standard operating procedures (SOP). Requirements: • Higher education (Information Technology, Information Security, or related fields). • At least 1 year of work experience in information security or IT (graduates without experience are also considered). • Basic knowledge of Windows and Linux operating systems. • Understanding of network protocols TCP/IP, DNS, HTTP/HTTPS, VPN. • General understanding of SIEM systems (IBM QRadar, Splunk, Microsoft Sentinel, ArcSight, Wazuh, etc.). • Skills in working with Active Directory, Windows Event Logs, and Syslog. • Basic knowledge of MITRE ATT&CK and Cyber Kill Chain. • Ability to read technical documentation in English. • Readiness to work in a shift schedule (24/7). Responsible person: Ахмадулина Алина Наильевна
Job listings that might be a good fit for you!
Loading map...