— Design and deploy SIEM/SOAR solutions (Elastic/Splunk/SentinelOne);

— Integrate diverse data sources from cloud and on-prem infrastructure into a central SIEM;

— Set up and maintain threat intelligence feeds and detection rules;

— Lead incident handling and improve response processes;

— Detect, investigate, and respond to security threats and vulnerabilities;

— Design and deploy Antivirus, EDR/XDR solutions;

— Set up and maintain VPN, MFA, SSO solutions;

— Detect, investigate, and respond to security threats and vulnerabilities;

— Collaborate with technical teams to enhance overall security;

— Create reports on incidents, trends, and system performance;

— Recommend and implement security best practices.

— 3+ years of experience with SIEM/SOAR tools in complex environments;

— 3+ years working in a SOC, managing high-volume incidents;

— 3+ years in cloud security (AWS/GCP/AliCloud);

— Strong incident detection and response skills;

— Excellent communication skills - technical and non-technical audiences;

— Strong analytical and problem-solving abilities;

— Familiarity with broader cybersecurity tools and technologies;

— Relevant certifications like OSCP/SANS GMON - nice to have.

— Competitive compensation above the market with bonuses twice a year up to 50% of annual salary;

— Sophisticated internal training and development programs;

— Comprehensive health insurance;

— Reimbursement for sports activities;

— Engaging in corporate events twice a year;

— High level of influence and ownership of the process;

— Work closely with experienced team in a flat organizational structure.