Information Security Analyst (Internal Incident Investigation)

Information Security Analyst (Internal Incident Investigation) at Sovcombank Technologies. Saint Petersburg, hybrid. Experience 3-5 years. Salary discussed at interview. Investigating insider incidents, data leaks, fraud; improving SOC methodologies.

Conduct investigations of information security incidents related to insider actions, data leaks, and corporate fraud. Develop and improve investigation methodology, standards, and incident response instructions. Quality control of investigations: verify completeness of evidence collection, correctness of data interpretation, and validity of conclusions. Interact with related departments to coordinate investigation processes and ensure collection of necessary data. Participate in projects to implement AI-based solutions and automate tools to improve SOC efficiency.

Experience: 3-5 years. Experience with SIEM and DLP systems. Deep understanding of business processes, corporate system architecture, and modern IT technology stack. Strong exposure to non-typical cases: HR incidents, leaks, insiders, fraud schemes. Knowledge of Russian legislation, regulatory and methodological documents governing confidential information security. Knowledge of basic principles of control and prevention of information leaks. Ability to analyze event logs in various systems.

Location: Saint Petersburg. Experience: 3-5 years. Salary: discussed at interview. Work format: hybrid.