Position: Security Operations Engineer
Company: EveryMatrix
Category: SQL
Experience required: 1y
English level: intermediate
Published: 2021-05-01T00:00:00+03:00

You will act as the first line of the EveryMatrix defence against potentially malicious events by monitoring many sources of security alerts and escalating confirmed incidents before they become real problems. You will also help drive technical service improvements and cyber remediation efforts to meet operational and strategic security goals.

**Key Responsibilities:**
Conducting regular vulnerability assessments in accordance with PCI DSS and ISO 27001
Working with the infrastructure and development teams to help mitigate vulnerabilities
Monitoring and following up on information security alerts, events, and incidents
Improving the processes and technologies for monitoring and analysing security events
Managing and fine-tuning various security tools (SIEM, NIDS, Microsoft security products, etc.)
Implementing security best practices and systems hardening guidelines within the infrastructure
Being part of the internal Cyber Incident Response Team
Processing of security requests and reports from end-users

**Required Skills:**

Bachelor's degree in Information Technology, Cybersecurity, or Computer Science
Work experience in IT and/or cybersecurity
Comfortable with basic cybersecurity principles, techniques, and technologies
Experience with or strong and proven interest in:
Vulnerability Assessment process and tools (Nessus, Qualys, Nmap, etc.)
SIEM and monitoring tools (AlienVault, Splunk, Qradar, Graylog, ELK, etc.)
Microsoft security technologies and products administration and implementation
Practical experience or good understanding of the Cyber Incident Response process
Strong analytical and problem-solving skills, good self-organization; eager to learn and develop cybersecurity skills
English (Intermediate or higher)

**Will be a Plus:**
Experience with network monitoring tools (Snort, Suricata, SELKS, etc.)
Knowledge of operating systems, TCP/IP stack, cloud and virtual infrastructure
Understanding of OWASP Top Ten security risks and how to mitigate them
Understanding compliance frameworks ISO/IEC 27001, PCI DSS
IT Security certifications like CompTIA Security+, Microsoft 365 Security Administration, etc.