Position: Security Engineer/Security analyst
Company: EPAM
Category: Security
Experience required: 3y
English level: upper
Published: 2020-04-01T00:00:00+03:00

We are looking for talented tier 1-2 security analysts experienced in Cyber/Information/Network/Cloud Security in enterprise environments, with basic scale knowledge of threat analysis of event data from commercial and open source infrastructure technology platforms.

As a security analyst you will:
* Work in 24/7 environment with rotation-based shifts, including weekends.
* Monitor on-prem and AWS infrastructure for attacks, intrusions and unusual, unauthorized or illegal activity.
* Monitor identity and access management, including monitoring for abuse of permissions by authorized system users.
* Create SIEM and SOAR detection and remediation scenarios, implement them as rules. Create, test and update playbooks.

* Perform threat hunting and support threat intelligence processes.
* Along with security monitoring perform other security operation activities.
* Generate reports for both technical and non-technical staff and stakeholders.
* Use advanced analytic tools to determine emerging threat patterns and vulnerabilities.
Toolset: Splunk, CarbonBlack, Red Canary, ThreatStack, AWS Guard Duty, AWS Detective, TheHive, Cortex, Nexpose, PaloAlto 

Requirements:
Technical knowledge of Internet security, networking protocols, and related technologies, including IDS/IPS, firewalls, content filtering, Network Behavior Analysis tool, Anti-malware and packet inspection
Basic understanding of Windows, Linux, DB and network device monitoring and logging technics.
Basic understanding of host and network security hardening, networking protocols, common intrusion techniques and common risk management concepts.
Basic knowledge of malware detection, intrusion detection and prevention systems
Experience with 1 or more SIEM solutions (Splunk, QRadar, ArcSight, LogRhythm, ELK, Wazuh, Apache Metron, OSSIM etc.)
Experience with 1 or more SIRP/SOAR tool (TheHive, Cortex, Phantom, Demisto, Resilient etc.)
Experience with network security.
Experience with Firewalls (F5, Juniper, Check Point, Palo Alto, Cisco).
PROJECT DESCRIPTION
1. 24x5 Security Operation Center Service Coverage for Epic Games with on-call support during weekends. 
EPAM will collect and analyze various operational data (request volumes, peak hours, requests complexity). 
2. Security Engineering for various Epic's programs such as Epic Games Store
3. Web Application Security Testing
4. Vulnerability management program. Building and running vulnerability remediation process for entire company