SIEM Engineer

SIEM Engineer at GNIVC. Remote work, 1 year experience, salary discussed at interview. Participate in MaxPatrol SIEM/EDR/VM/BAD implementation projects.

Participate in projects for implementation, development, and improvement of MaxPatrol SIEM/EDR/VM/BAD systems. Administer and optimize MaxPatrol systems. Provide technical maintenance of solutions: updates, backup, monitoring, troubleshooting. Analyze system components and log files of event sources. Interact with the incident response team, network engineers, IT and IS specialists. Work with the technical support of the MaxPatrol software vendor. Prepare reports on system status for IS and IT teams. Participate in development and updating documentation for MaxPatrol products in terms of administration.

Higher specialized education in information security or a professional retraining diploma. Understanding of the principles of main information security tools. Knowledge of Python/Bash/PowerShell for automation and optimization. Experience with SQL and log storage/analysis systems, including Elasticsearch. Practical experience in Linux/Windows environments. Experience with Docker. Experience using Zabbix/Grafana for analysis and monitoring of system components. Experience analyzing log files of event sources. Experience administering SIEM/EDR/VM: updates, backup, optimization, monitoring.