Position: Junior Security Operations Engineer
Company: Infopulse
Experience required: 2y
English level: intermediate

As a member of that SOC a selected specialist will perform the Security Operations of both BICS as well as TeleSign (BICS affiliate).

Experience in Telco or a Carrier would be nice, but not a must. We will happily introduce you.

**Areas of Responsibility:** 

- Perform various security related tasks according to standard operating procedures
- Participate on integration of the SIEM tool with sources of security incidents – e.g. logs from servers and applications, IDS/IPS, network and security devices, Vulnerability Management system, Antivirus system, etc.
- Build new use cases and enhance already existing ones, create alerts and monitoring dashboards, build reporting and SOC’s KPI
- Develop and fine-tune security processes and procedures
- Actively detect and identify security weaknesses and determine the required remediation plan
- Strive for improvements and/or automation of existing tooling (look into evaluation and selection of new tools and supporting assets)
- Perform security incident analysis and recommend remediation steps
- Participate in automation of the incidents prioritization and false positives identification
- Act as a first-line contact point for various security consultations

**Qualifications:**

- Knowledge and experience with Unix-like/Microsoft operating systems (general administration, hardening)
- Knowledge of IT and Network Security principles, techniques and technologies
- Familiarity with Information Security industry standards/best practices and relevant regulations
- Application security and general information security knowledge (eg. XSS, buffer overflow, URL tampering, SQL Injection, DDoS, Botnets, etc.)
- Basic programming and/or scripting skills (Python, bash, PowerShell)
- Proficiency in written and spoken English

**Will be an advantage:**

- Professional experience with IT and Network Security products and services
- Experience with Security Information and Event Management (SIEM) tools like Splunk, ArcSight, LogRhythm, etc.
- Experience with Vulnerability scanners like Nessus, Nexpose, MVM, Qualys, etc.
- Experience with IDS/IPS solutions (Security Onion, Snort, Cisco IPS, NGIPS)
- Programming and/or scripting skills in any of the following: Python, Php, Bash, Powershell, Java
- University degree in Information Technology, ideally IT Security related
- Experience with collaboration tools / ticketing systems (RT, Jira)
- Experience with Endpoint Detection and Response Solutions.