Position: Security Analyst / Splunk expert
Company: Intellias
Category: Security
Experience required: 3y
English level: upper

Responsibilities:
Monitor on-premis, cloud and hybrid infrastructures, detect attacks, intrusions, and unusual, unauthorized, or illegal activity 
Monitor identity and access management systems and processes, including monitoring for abuse of permissions by authorized system users 
Create SIEM and SOAR detection and response scenarios, implement them as rules. Create, test, and update the playbooks 
Manage Splunk rules according to incident response reports, root cause analysis, threat hunting reports and business needs. 
Configure or guide system administrators what you need configure on target solutions. 
Apply best practices on Splunk environment and connected modules. 
Help SOC to solve day-to-day activities and actively collaborate 

Requirements:
- Minimum 3 years of Splunk experience.
- Technical knowledge of network security, communication protocols and related technologies, including IDS/IPS, firewalls, content filtering, Network Behavior Analysis tool, and packet inspection
- Good understanding of cloud architecture and services
- Advance understanding of Windows, Linux, DB, and network device monitoring and logging techniques
- Advance understanding of host and network hardening
- Basic knowledge of malware, intrusion detection, and prevention
- Experience with network security operations will be a plus
- Experience with web security assessment and exploitation will be a plus

Nice to have:
Experience with endpoint protection
Experience with vulnerability management tools
Additional 2 years of IT service (Information Security or Administration)
Experience in technical writing, procedures, and policies development
Experience in penetration testing
Good knowledge of 1-2 programming languages