компания "itransition" who we are: we are team of sres highly skilled in multiple areas. we support multiple teams (machine learning ops and developers, data scientists, ui/ux, backend developers, devops, prodops) and customers. more than 200 people rely on our services daily and all production customers expect issues resolved with a qos. our goal is to deliver reliable products to our customer base. what youchr(39)ll do: as the information security operations engineer (secops) part of sre team, you will mentor secops of a high-performing sre team to protect and defend from cyber threats. you will provide hands-on expertise, in day-to-day security operations (secops) including monitoring, reporting, threat intelligence, threat hunting and incident response, training other sre engineers of day-to-day security operations. test security of our product line, detect issues, and create tickets to resolve the issues. ensure owasp standards experience with analysis from reports produced by qualys, blackduck, sonarqube scripting experience with shell, python, javascript experience integrating security pipeline in a gitlab own the security issue until it gets resolved. validate all security fixes and signoff on resolution. mentor the security operations team to effectively prepare, detect, and respond to incidents serve as escalation point to managed service providers that perform reporting, detection, and response services update, socialize, and lead activities as they relate to the enterprise-wide incident response plan develop and maintain soc processes and procedures to ensure consistent and effective operations provides oversight of security operations to support security monitoring, protection, and delivery of security services throughout the organization. builds and manages relationships with diverse stakeholders including senior-level technical and non-technical staff. produces and reviews key performance indicators (kpi) of security operations performance and distribute executive metrics train sre engineers to be part of security incident response team (sirt) by responding to cio team. provides guidance to develop, maintain and promote a set of security operations playbooks with internal it teams and external working groups to effectively trigger and execute the security incident response process escalates issues to leadership in a timely manner with appropriate information regarding risk, action times and root cause analysis what youchr(39)ll bring to the team: proven ability to apply cybersecurity operations best practices experience working in a soc environment. experience with security testing tools and cloud solutions ability to communicate and collaborate cross-functionally, with various levels above and below, internally and externally, and to technical and non-technical audiences exercise independent judgment in methods, techniques and evaluation criteria for obtaining results ability to rapidly resolve issues and recognize when escalation is necessary familiarity with aws and/or azure cloud security certification in one or more of the following areas: ccsp, cissp, cism, sscp, ceh, gcih, gcia, gcfa what youchr(39)ll get: opportunities for growth: professional development to make engineers great. recognition: you will be valued as everyone else in the team. we believe in human values. minimal bureaucracy: an entrepreneurial environment of ownership and accountability allows you to get work done. type of environment - every team member is a leader. a culture that lives its values: our values are not just words or window dressing; they guide our decisions - big and small - every day.
Адрес
Узбекистан Ташкент