Senior SOC Analyst

Senior SOC Analyst in Moscow. 3+ years experience. Salary 200,000-300,000 RUB. Company: F6.

Responsibilities: • Work with a line of cyber threat prevention and detection systems. • Work with information security event management systems and external attack surface control. • Conduct incident investigations to identify penetration vectors, restore chronology, and determine impact. • Conduct proactive threat hunting, identify hidden traces of compromise and illegitimate activity in IT infrastructure. • Ensure rapid response, independently carry out measures to eliminate cyber threats and restore assets involved in cyber attacks. • Consult and support clients throughout the incident response cycle. • Interact with development, cyber intelligence, and other teams to improve threat detection efficiency. • Develop new and optimize existing correlation rules, signatures, and detection methods. • Actively participate in creating and refining playbooks and monitoring and incident response procedures. • Generate response reports with reconstruction of cyber attack chronology, develop recommendations to reduce likelihood of recurrence.

Apply if: • You understand the architecture of popular operating systems and sources of forensically significant information in them. • You understand modern vectors of computer attacks, tactics, and techniques used by attackers. • You have experience writing detection rules for malware and its behavior (SIGMA, Suricata, YARA, etc.). • You have experience in detecting and investigating cyber incidents in SIEM or XDR systems. • You have experience in forensic research and artifact hunting in Linux. • You have experience working on the second or third line of SOC. • You have experience with XDR platforms and response based on EDR solutions. • You have experience in configuring and administering SIEM solutions, developing and optimizing correlation rules for them. • You have practical experience in automating response via SOAR platforms.

Salary: 200,000 — 300,000 RUB. Location: #Moscow. #Office.