Security Operations Engineer Offline

You will act as the first line of the EveryMatrix defence against potentially malicious events by monitoring many sources of security alerts and escalating confirmed incidents before they become real problems. You will also help drive technical service improvements and cyber remediation efforts to meet operational and strategic security goals.

Key Responsibilities:

Conducting regular vulnerability assessments in accordance with PCI DSS and ISO 27001

Working with the infrastructure and development teams to help mitigate vulnerabilities

Monitoring and following up on information security alerts, events, and incidents

Improving the processes and technologies for monitoring and analysing security events

Managing and fine-tuning various security tools (SIEM, NIDS, Microsoft security products, etc.)

Implementing security best practices and systems hardening guidelines within the infrastructure

Being part of the internal Cyber Incident Response Team

Processing of security requests and reports from end-users

Required Skills:

Bachelor's degree in Information Technology, Cybersecurity, or Computer Science

Work experience in IT and/or cybersecurity

Comfortable with basic cybersecurity principles, techniques, and technologies

Experience with or strong and proven interest in:

Vulnerability Assessment process and tools (Nessus, Qualys, Nmap, etc.)

SIEM and monitoring tools (AlienVault, Splunk, Qradar, Graylog, ELK, etc.)

Microsoft security technologies and products administration and implementation

Practical experience or good understanding of the Cyber Incident Response process

Strong analytical and problem-solving skills, good self-organization; eager to learn and develop cybersecurity skills

English (Intermediate or higher)

Will be a Plus:

Experience with network monitoring tools (Snort, Suricata, SELKS, etc.)

Knowledge of operating systems, TCP/IP stack, cloud and virtual infrastructure

Understanding of OWASP Top Ten security risks and how to mitigate them

Understanding compliance frameworks ISO/IEC 27001, PCI DSS

IT Security certifications like CompTIA Security+, Microsoft 365 Security Administration, etc.