We are looking for a Security Engineer who will be responsible for operating and developing SIEM systems (with a focus on Elastic), integrating various log sources, incident investigation, security audits, and strengthening the overall security posture of the infrastructure.
Responsibilities
- Operation and development of Elastic SIEM (ELK)
- Integration and analysis of logs from Linux and Windows systems.
- Integration and analysis of AWS logs.
- Integration of logs from IdP and SaaS services.
- Development of detections, alerts, and Kibana dashboards.
- Monitoring and investigation of security incidents.
- Analysis of authentication, SSO, and MFA events.
- Using security benchmarks when analyzing configurations, detections, and during security audits.
- Supporting other information security tasks and initiatives (audits, IAM, SaaS security, data preparation for reporting).
Requirements
- 2+ years of experience in Information Security / SIEM / SOC
- Strong hands-on experience with Elastic Stack / Elastic SIEM
- Experience working with authentication and access logs
- Understanding of IdP / IAM (SSO, MFA)
- Knowledge of Linux and Windows
- Experience with Jira and Confluence
- Practical understanding of information security standards and methodologies
Nice to Have:
- Okta / Google Workspace / Azure AD
- AWS security
- SOAR
- Python / Bash
We offer
- On-site or remote
- Opportunities for professional growth
- 5/2 working schedule.
- Friendly working environment
If you meet the requirements and are ready to contribute to our team, we encourage you to apply for this exciting opportunity.
