SOC Analyst

Responsibilities

• Analyze security events from endpoints (Windows, Mac, Linux), Network IDS, Web-proxies, Mail-gateways, Active Directory infrastructure.
• Detect and investigate information security incidents.
• Propose incident response actions and remediation plans.
• Identify potential vectors of attacks, develop detection methods by existing technological solutions.
• Adjust detection logic to fit customer needs (filter out false positives, customize correlation rules, etc).
• Communicate with customers regarding detected incidents and suspicious activities.

Mandatory Skills

• Practical experience in the identification and investigation of information security incidents, development of recommendations to prevent similar incidents in the future.
• Understanding of the methods, tools and processes to respond to information security incidents.
• Experience in network traffic and log-file analysis from various sources.
• Knowledge of current threats, vulnerabilities, typical attacks on information systems and tools to implement them, as well as methods for detection and response.
• Knowledge of network protocols, the architectures of modern operating systems and information security technologies.
• Experience working with ELK stack is welcome.
• Certifications (Offensive Security, GIAC) are welcome.

Apply for a job

Fields marked with * are required.

Upload resume. Acceptable CV format: .docx, .pdf, maximum file size 5MB.

I agree to provide my personal data to process my application for jobs opened at Kaspersky Group companies and signing of employment contract. I understand and agree that my data will be processed as described in the Privacy Policy. I understand and agree that I can withdraw consent at any time. I understand that my consent is optional and I can withdraw it according to Privacy Policy at any time.