Security Operations Engineer

Company Description

Playtech is the world's largest online gaming software supplier traded on the London Stock Exchange Main Market, offering cutting-edge, value-added solutions to the industry's leading operators. Company's business portfolio consists of the most prominent names in the business, including William Hill, Netplay, Betfred, Mansion, Bet365, etc.

Follow us on Instagram goo.gl/HF1Ho5

Watch us on YouTube goo.gl/TnZDVK

Job Description:

We are looking for a SOC Engineer to support, evaluate, implement and maintain Playtech Security Operations Center technologies and services including SIEM, Cyber Threat Intelligence & Security Incident Response Solutions, Sandbox, CASB, UEBA, EDR systems, etc. The ideal candidate will assist with identifying cyber security incidents and making recommendations on how to increase efficiency in monitoring and responding to security events, in a timely manner. This candidate should possess a strong understanding of cloud security controls and architecture along with a fundamental understanding of traditional security monitoring tools to include Security Design and Architecture, Compliance, Threat and Vulnerability Management, Network Design and Endpoint Security.

Responsibilities:

• Support, maintain and operate security infrastructure and technologies used by SOC and make recommendations to enhance threat detection
• Build up and improve real-time security monitoring and incident response framework and playbooks
• Develop security detection use cases, tune signatures and refine analytical models in order to identify malicious activity
• Maintain, tune and troubleshoot SIEM Solution to deliver optimal performance and best detection and investigation capabilities
• Identify new data sources and integrate them into monitoring operations
• Evaluate and implement new information security tools and technologies in support of SOC needs
• Provide analysis and trending of security events, alarms, and information from a large number of heterogeneous security devices and critical environments
• Provide Incident Response (IR) investigation, support and triage to security alerts
• Participate in knowledge sharing with other analysts and improve incident response documentation

Qualifications

• Strong hands-on experience with Security Information and Event Management (SIEM) / Incident Management & Automation systems
• At least 3+ years of experience in a similar technical security role with a strong background in security tools
• Strong understanding of Information Security, IT and Networking principles
• Proven experience in administering security controls in an organization
• Technical knowledge related to cyber security monitoring platforms such as intrusion detection systems (IDS), Endpoint Protection, Web proxies, firewalls, EDR, UEBA, CASB, etc.
• Ability to identifies and develop workflow automation to lower response time and eliminate lengthy response times
• Deep understanding of network and application security threats, attack techniques and mitigation options
• Experience responding to, analyzing, and communicating information security incidents
• Security mindset with business enablement strategy thinking
• Must be able to learn fast and adapt quickly to ever changing requirements and priorities
• Relevant Security, Systems, and Networking certifications a plus
• Good English communication skills (both speaking and writing)

We offer:

• Professional growth
• Educational possibilities
• Competitive compensation
• Fully-equipped perfect office space located in the city center ("Palats Sportu" metro station)
• Warm and friendly attitude to every specialist
• Possibility to cooperate with a product company

If you are creative, "out of box thinker" and ambitious enough to make a difference in such a large scale International business, you are more than welcome to apply for one of our open positions at Playtech Kyiv. We'll contact you if there's a fit with one of our opportunities.