Security Operations Center Engineer

You will

• Design, develop, and implement a data collection, transformation, and enrichment procedure utilizing our custom data model and deep knowledge of our infrastructure.
• Collaborate closely with Infrastructure and Application Security teams, providing insightful feedback based on telemetry collected by SOC.
• Develop, manage and ensure optimal performance of our high-load SIEM system.
• Streamline and automate routine analysts' tasks and playbooks to increase efficiency and accuracy.
• Develop and implement automation for incident response actions to minimize manual intervention and speed up response times.
• Design and implement proactive auto-response services to handle known issues and threats.
• Create and implement ML-based SOC robot-analyst to optimize the detection and response to security incidents.
• Collect, analyze and interpret useful metrics to continually improve and maintain our security infrastructure.
• Create and maintain operational dashboards for real-time observation of infrastructure state, ensuring high visibility and quick reaction to any potential issues.

What makes you a great fit

• 3+ years of experience in the Information Security field.
• 3+ years of experience as a DevSecOps engineer.
• Understanding of modern cloud platforms: Azure/AWS/GCP (at least one), their services, sources of events, collection options, possible attacks, and detection approaches.
• Hands-on experience with Elastic Stack/Splunk.
• Proficiency in one of the following languages: Python, Go.
• Work experience with stream processing technologies: Logstash, Vector, Benthos.
• Broad spectrum of tech knowledge in the following areas (at least part of the list): Linux, Docker, Kubernetes, Cisco ASA, Palo Alto, macOS, Microsoft Windows/Active Directory, SSO, Office 365/Google Workspace.
• Ability to leverage business communication skills to inform, convince, and educate stakeholders, employees, and leadership to enable effective information security activities and processes.
• Ability to solve complex tasks in cooperation with other security and business divisions.
• Ability to work with high autonomy in compliance with deadlines.
• Proficiency in English (Upper-Intermediate or higher).
• General acquaintance with regulatory frameworks and compliance requirements associated with financial services is a plus.
• Cloud/K8s security or administration certifications are a big plus.

What you can expect from us

• Competitive and attractive compensation.
• Extensive learning opportunities, such as professional training and certifications, soft skills development, free English courses, and trading workshops.
• Health and life insurance for employees, spouses, and children, including vaccinations, tests, mental health care, and coverage for vision and dental care.
• Generous time off, including 21 days of annual leave and paid sick leave.
• Flight tickets, hotel or apartment accommodation in Cyprus for your first month, migration support, and legal help for you and your family.
• Education allowance for your children’s school and kindergarten fees.
• Access to our very own sports club with dedicated coaches, free Sanctum Club memberships for you and your spouse, corporate SUPs, jet skis, etc.
• A branded company car with a parking space near the office.
• Outstanding team-building experiences and Exness community gatherings.

Your journey after applying

• First interview with your TA Specialist (up to 45 minutes).
• Short online English test (for non-native speakers).
• Technical interview (1 hour).
• Final interview (1 hour).