Junior Security Operations Engineer

Infopulse Ukraine is inviting talented professionals to join our project as a JuniorSecurity Operations Engineer in our Kyiv office. The prospective specialist will have an opportunity to join BICS team on both national and international levels.

Areas of Responsibility

We are currently looking for an Operations Engineer to strengthen our Security Operations Centre (SOC) in Kyiv, which reports into the BICS Security department headquartered in Brussels. As a member of that SOC a selected specialist will perform the Security Operations of both BICS as well as TeleSign (BICS affiliate).

Experience in Telco or a Carrier would be nice, but not a must. We will happily introduce you.

• Perform various security related tasks according to standard operating procedures
• Participate on integration of the SIEM tool with sources of security incidents - e.g. logs from servers and applications, IDS/IPS, network and security devices, Vulnerability Management system, Antivirus system, etc.
• Build new use cases and enhance already existing ones, create alerts and monitoring dashboards, build reporting and SOC's KPI
• Develop and fine-tune security processes and procedures
• Actively detect and identify security weaknesses and determine the required remediation plan
• Strive for improvements and/or automation of existing tooling (look into evaluation and selection of new tools and supporting assets)
• Perform security incident analysis and recommend remediation steps
• Participate in automation of the incidents prioritization and false positives identification
• Act as a first-line contact point for various security consultations

Qualifications

• Knowledge and experience with Unix-like/Microsoft operating systems (general administration, hardening)
• Knowledge of IT and Network Security principles, techniques and technologies
• Familiarity with Information Security industry standards/best practices and relevant regulations
• Application security and general information security knowledge (eg. XSS, buffer overflow, URL tampering, SQL Injection, DDoS, Botnets, etc.)
• Basic programming and/or scripting skills (Python, bash, PowerShell)
• Proficiency in written and spoken English

Will be an advantage

• Professional experience with IT and Network Security products and services
• Experience with Security Information and Event Management (SIEM) tools like Splunk, ArcSight, LogRhythm, etc.
• Experience with Vulnerability scanners like Nessus, Nexpose, MVM, Qualys, etc.
• Experience with IDS/IPS solutions (Security Onion, Snort, Cisco IPS, NGIPS)
• Programming and/or scripting skills in any of the following: Python, Php, Bash, Powershell, Java
• University degree in Information Technology, ideally IT Security related
• Experience with collaboration tools / ticketing systems (RT, Jira)
• Experience with Endpoint Detection and Response Solutions.