Scope of responsibilities:
- Managing IT infrastructure (servers, arrays, switches, LAN / vLAN / WAN);
- Administering MS Windows, MS SQL Server, Linux, MacOS servers;
- Managing Active Directory services;
- Participation in coordinating activities related to the administrative service of the company and client companies;
- Administrative service of programs: Office 365;
- Solving reported problems as part of I and II line support remotely and during service visits at the end Customer’s headquarters;
- Working in a 24/7 SOC;
- Reacting to security-related events and managing them;
- Engagement in investigations of detected security incidents and using tools to identify and report the results of conducted investigations against recorded incidents to higher-level management;
- Responding to alerts from endpoint protection and malware detection tools;
- Taking action to maintain the desired level of security;
- Implementing changes to infrastructure, IT systems, their optimization and monitoring;
- Testing and uploading system patches;
- Knowledge of PowerShell;
- Participation in creating, updating documentation on security, policies, procedures, instructions.
Requirements:
- Knowledge of server systems Linux, Windows, MacOS;
- Knowledge of operating systems Windows, MacOS, Linux;
- Knowledge of safety rules in accordance with ISO 27000, 27001, 22301 standards;
- Knowledge of MISP, NIS, OWASP standards;
- Knowledge of FireWall systems, XDR, AV, DLP, MDM, PKI;
- Ability to use VirusTotal and associated rules;
- Very good technical / practical competencies in the field of SIEM products;
- Practical knowledge of network issues (routing, TCP / IP protocols);
- Experience in IT security systems (Next Generation Firewall, WAF, Anti DDoS, EDR, IPS / IDS);
- Ability to learn quickly, work under pressure, think out of the box;
- Good knowledge of Microsoft and M365 applications (including Windows Server, Microsoft Windows Terminal Services and SharePoint);
- Knowledge of backup systems and designing backup policies;
- Experience in administering Active Directory services;
- Very good knowledge of virtualization platform e.g. Hyper-v, VMWare;
- Communicative knowledge of English;
- Driving license category B;
- Very good organization of own work, accuracy, and meticulousness;
- High analytical and organizational skills, accuracy, attention to detail;
- Effective time management skills;
- Strong analytical and communication abilities;
- Ability to work in stressful situations;
- Administering the Exchange 2016 mail system (including older ones);
- Monitoring systems and applications;
- Knowledge of scripting languages;
Requirements that will be an advantage:
- Knowledge of TheHive Project system;
- Knowledge of MITRE;
- Ability to navigate the DarkWeb;
- Willingness to learn and constantly improve qualifications / obtain certifications;
- Experience in SOAR solutions;
- Experience in investigative analytics;