We are looking for a Senior Security Engineer to provide operational leadership and support for the SIEM infrastructure.

As a member of the Security Operations Team, the candidate will work on potential use cases pinpoint and generation of SIEM metric reports.

If this description aligns with your skills and interests, consider joining the EPAM team!
This position offers remote setup with the flexibility to work from any location in Georgia, whether it's your home, a well-equipped office in Tbilisi or coworking spaces in Batumi and Kutaisi.

#LI-DNI#July-Referral-Digest-GE#LI-KG7

Responsibilities

• Take ownership of the SIEM infrastructure, including monitoring health status and proper sizing
• Optimize the operation of SIEM filters, rules, expressions, reports and other identification mechanisms of the threat and vulnerability management technologies
• Manage SIEM infrastructure & services, pinpointing potential use cases, implementing new log sources and delivering meaningful alerts to our SoC
• Analyze, design, develop and deliver solutions for adversary stoppage
• Execute purple exercises in collaboration with colleagues on our internal and external infrastructure, including AAD, web applications, cloud solutions, network, and more

• 3 years of experience in Security Engineering
• At least 1 year of SIEM administration with ArcSight
• PNPT and/or OSCP certifications or related knowledge
• Familiarity with attack vectors, vulnerabilities and content creation
• Proven background as a SoC analyst
• Fluent English communication skills at a B2+ level

• SIEM administration experience with other tools

• We connect like-minded people:
  • Delivering innovative solutions to industry leaders, making a global impact
  • Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
  • Opportunity to work abroad for up to two months per year
  • Relocation opportunities within our offices in 50+ countries
  • Corporate and social events
• We invest in your growth:
  • Leadership development, career advising, soft skills and well-being programs
  • Certifications, including GCP, Azure and AWS
  • Unlimited access to LinkedIn Learning, Get Abstract, O'Reilly, Cloud Guru
  • Free English classes with certified teachers
• We cover it all:
  • Participation in the Employee Stock Purchase Plan
  • Monetary bonuses for engaging in the referral program
  • Comprehensive medical & family care package
  • Five trust days per year (sick leave without a medical certificate)
  • Benefits package (sports activities, a variety of stores and services)