استخدام کارشناس مرکز عملیات امنیت

توضیحات آگهی

Employment Type Full time
Work Arrangement Fully Remote
Compensation Competitive USD based compensation
About the Role
XFinance Holding is seeking a detail oriented SOC Analyst to strengthen its security monitoring and incident response capabilities across a distributed technology environment
The successful candidate will monitor security alerts analyze system and network logs investigate suspicious activities and perform initial incident triage and escalation Working closely with the Head of Security Infrastructure this role will also contribute to improving SIEM detection rules maintaining monitoring coverage and ensuring accurate security documentation
Key Responsibilities
Monitor and investigate daily security alerts from Wazuh SIEM Teleport Cloudflare and relevant servers and security systems
Analyze Linux and Windows logs network events and security telemetry to identify suspicious activity and potential threats
Perform initial incident triage assess severity execute established response playbooks and escalate significant incidents
Document investigations incident timelines response actions and findings and prepare regular security monitoring reports
Develop and tune SIEM detection rules decoders and use cases to improve detection accuracy and reduce false positives
Support vulnerability management and the maintenance and monitoring of AV SIEM and EDR XDR security solutions
Monitor CRM administrator activity privileged access events and log integrity including alerts for missing logs in the WORM logging pipeline
Conduct periodic access reviews for Teleport Passbolt and ClickUp documenting access changes and maintaining before and after records
Identify monitoring gaps and recommend practical improvements to detection incident response and security operations
Requirements
2 3 years of hands on experience in SOC operations security monitoring or a comparable security operations role Tier 1 2
Practical experience with Wazuh or a comparable SIEM platform including writing and tuning detection rules and working with decoders
Ability to analyze Linux authentication and system logs including auth journald and Nginx as well as Windows Event Logs
Working knowledge of TCP IP DNS TLS firewalls and common network security threats
Familiarity with firewalls IDS IPS EDR XDR threat intelligence and incident response procedures
Understanding of the MITRE ATT CK framework and common attack techniques
Basic scripting skills in Bash Python or PowerShell
Strong analytical troubleshooting and documentation skills with attention to detail and the ability to work independently
Good written English communication skills and the ability to collaborate effectively with a fully remote team
Preferred Qualifications
Bachelor s degree or higher in Information Technology Computer Engineering Information Security or a related field
Experience in fintech brokerage banking cryptocurrency or other financial services environments
Familiarity with Cloudflare WAF and Zero Trust privileged access management and centralized logging
Knowledge of NIST and ISO IEC 27001 security frameworks
Relevant certifications such as CompTIA Security CompTIA CySA Microsoft SC 200 or equivalent credentials
Work Conditions
Full time fully remote position
Working hours aligned with the London business schedule
Participation in an on call rotation for security incidents when required
Competitive USD based compensation commensurate with qualifications and experience
Direct reporting to the Head of Security Infrastructure
How to Apply
Please submit your CV through this job posting on Jobinja
Your CV should demonstrate your practical SIEM experience log analysis capabilities and involvement in security monitoring or incident response Where applicable include examples of detection rules security investigations automation and monitoring improvements you have implemented
Shortlisted candidates will be contacted by email regarding the next steps in the recruitment process
شرکت ایکس فایننس XFinance
دسته بندی IT DevOps Server
نحوه همکاری تمام وقت
نوع همکاری حضوری
مدرک تحصیلی کارشناسی
سابقه کار کمتر از سه سال
حقوق توافقی
جنسیت مهم نیست
مهارت ها soc siem Linux
شهر تهران تهران