описание
Описания нет
задачи
- Develop and maintain threat detection, monitoring, and response capabilities
- Design and implement SIEM and SOAR solutions
- Build security automation and orchestration workflows
- Conduct threat modelling and security risk assessments
- Develop and optimise threat detection use cases and monitoring controls
- Lead threat hunting activities and proactive threat identification
- Integrate security tooling across the technology estate
- Support incident response and security operations activities
- Advise on security controls across infrastructure, applications, and cloud environments
- Evaluate emerging threats and contribute to continuous improvement of security capabilities
требования
- 5+ years' experience in Security Engineering, Security Automation, Security Operations, or related Cyber Security roles
- Experience delivering and implementing enterprise security technologies and controls
- Strong understanding of cyber threat detection, incident response, and security monitoring practices
- Experience working with recognised cyber security frameworks including: NIST, MITRE ATT&CK, Cyber Kill Chain
- Experience working with infrastructure, cloud, and enterprise security environments
- Strong communication and stakeholder management skills
- SIEM implementation, configuration, and optimisation
- Security Orchestration, Automation and Response (SOAR)
- Threat Detection Engineering and Threat Hunting
- Security Monitoring and Incident Response
- Security Tooling Integration and Orchestration
- Threat Modelling and Risk Analysis
- Identity Threat Detection and Prevention
- Privileged Access Management (PAM)
- Key Management Systems (KMS)
- Endpoint Detection & Response (EDR)
- Security technologies including: SIEM, EDR, DLP, Secure Email Gateways (SEG), Proxy Technologies
- Microsoft Sentinel or equivalent SIEM platforms
- PowerShell and Python scripting
- Windows Event Collection and Log Management
- Active Directory security
- Networking and Security Protocols: TCP/IP, Firewalls, VPNs, Proxies
- Cloud Security: Azure, AWS, GCP
- Windows and Linux server administration
- Будет плюсом: Microsoft Security Certifications: AZ-500, SC-200, SC-900, CompTIA Security+; Experience designing and implementing automated remediation workflows; Experience with Logic Apps, Function Apps, and security automation tooling; Advanced threat hunting and custom detection engineering experience; Experience evaluating and implementing new cyber security solutions; Knowledge of configuration drift monitoring and security analytics
условия
- Условий в вакансии нет
