We are looking for a Senior SecurityEngineer who will be responsible for providing operational leadership and support for the group SIEM infrastructure.
As part of the Security Operations Team, the candidate will work closely with their direct manager to identify potential use cases and report on metrics generated.
If this resonates with you, this could be the perfect opportunity to join the EPAM team!

#LI-DNI#EasyApply

Responsibilities

• Taking ownership of the SIEM infrastructure, monitor the health status and size it properly
• Ensuring optimal operation of SIEM filters, rules, expressions, reports, data monitors and other identification mechanisms of the threat and vulnerability management technologies
• Providing operational ownership of SIEM infrastructure & services, identifying potential use cases, implementing new log sources and work to deliver meaningful alerts to our SoC
• Generating weekly reports to highlight recurring and potential attacks
• Providing operational ownership of SOAR infrastructure and automation playbooks
• Analyzing, designing, developing and delivering solutions to stop adversaries
• Identifying threats
• Performing investigations on incidents/alerts generated from the SIEM
• Performing purple exercises in collaboration with your colleagues of our internal and external infrastructure
• AAD, web-applications, cloud solutions, network, etc

• 3+ years of experience in Security Engineering
• At least 1 year of SIEM administration experience with ArcSight required
• Certifications or related knowledge: PNPT and/or OSCP
• Demonstrated experience with attack vectors, vulnerabilities and content creation
• Proven knowledge/experience of SoC analyst (L2-L3)
• Fluent English communication skills at a B2+ level

• SIEM administration experience with other tools

• We gather like-minded people:
  • Engineering community of industry professionals
  • Friendly team and enjoyable working environment
  • Flexible schedule and opportunity to work remotely within Poland
  • Chance to work abroad for up to 60 days annually
  • Relocation within our 50+ offices
• We provide growth opportunities:
  • Outstanding career roadmap
  • Leadership development, career advising, soft skills, and well-being programs
  • Certification (GCP, Azure, AWS)
  • Unlimited access to LinkedIn Learning, Get Abstract, O'Reilly, Cloud Guru
  • Language classes in English and Polish for foreigners
• We cover it all:
  • Stable income (Employment Contract or B2B)
  • Participation in the Employee Stock Purchase Plan
  • Benefits package (health insurance, multisport, shopping vouchers)
  • Strategically located offices featuring entertainment and relaxation zones, table tennis and football, free snacks, fantastic coffee, and more
  • Referral bonuses
  • Corporate, social and well-being events
• Please, note:
  • The set of bonuses might vary based on the role you apply for - specifics will be discussed with our recruiter during the general interview
  • We will reach out to selected candidates exclusively