IT CONNECT to firma stworzona dla ludzi dynamicznych, realizujących się w codziennej pracy. Na bieżąco dysponujemy najciekawszymi propozycjami pracy w dziedzinie IT i technik, a nasi pracownicy pracują z najlepszymi i najbardziej znanymi firmami w Polsce. Poszukujemy zarówno doświadczonych specjalistów i menadżerów, jak również studentów ostatnich lat i świeżych absolwentów IT. Najważniejsza dla nas jest Twoja pasja i chęć samorealizacji. U nas będziesz realizować swoje marzenia!!
Nr Ref.: [1482] P
- Use Microsoft Sentinel as appropriate to provide logging and metrics for a variety of Azure based applications.
- Create alerts and monitoring for key security and application events.
- Develop dashboards and reports for monitoring of real-time log data.
- Train Security Analyst on utilizing tools to perform routine security monitoring and incident response activities regarding the dashboards and alerts that have been created.
- Advise on prioritization of data collection and data retention to achieve maximum results for security and event monitoring.
- Project: IT/OT Security Platforms Plan and Implement.
Background:
Digitalization and agility are the cornerstones of the strategy for SKF, and business data is our competitive advantage and, in many cases, also act as enabler for new business models. Ranging from applications on the shopfloor and in manufacturing systems to the digitalized data collection in our customer environment, we process and store data as part of our normal and daily operations. We are increasingly making data driven decisions to enable agility in new and existing business models, so keeping our and our customers data safe is of vital importance. In the design and establishment of the future security architecture we need to add experience and capabilities in Sentinel and Defender suite from Microsoft . The role is central in our effort to ensure an enterprise design and implementation of the SKF Security Architecture.
- 5+ years of experience in administration or building SIEM products like Azure Sentinel, ArcSight, Splunk or QRadar.
- Experience in development of SIEM and SOAR use cases.
- Experience in creating analytic rules, incidents, play-books, notebooks, workbooks, threat hunting and KQL queries in Azure Sentinel.
- Creation of data normalization and parsing capabilities within Log Analytics workspace.
- Scripting experience in PowerShell or Python or software development experience.
- Intermediate knowledge of cloud security functions in Azure and/or AWS.
- Remote work
- Work for a telecommunications company
- Possibility of using private medical care and a sports card on preferential terms