Security SIEM Engineer
Luxoft is a global leader in high-end software development.
Luxoft is looking for talents with a passion for technology & ready to create original solutions. Once on board, you are invited to expand your knowledge & skills, offering you a continuous learning experience helping you stretch your potential.
So if you’re enthusiastic by the idea of accessing cutting edge technology & innovation to make an impact, why don't you join us?
Security SIEM Engineer
Miejsce pracy: Krakow
Nr Ref.: VR-19330
Responsibilites
On this position you will work in a global team and act as the subject matter expert for your domain
- Understands monitoring use cases and business requirements and translates them into SIEM (ArcSight) reports, views, and rules;
- Analyzes security events originating from various sources like Windows or UNIX servers, network devices, databases, malware scanners, etc. and determines how they can be leveraged to implement the desired monitoring use cases;
- Improves quality of raw and processed logs, identifies gaps;
- Analyzes the performance of ArcSight reports, views and rules; recognizes problems by identifying anormalities and evaluating trends; proposes improvements and measures to fix the identified issues with ArcSight reports and alerts; cooperates with platform owners to support issue resolution;
- Determines threat / risk level for prioritization of resolution activities;
- Proposes monitoring rules and reports that focus on relevant correlations and alerts with low rate of false positives, which then are manageable by Security Operations Center;
- Coordinates with SOC service management.
Requirements
- University or comparable level degree in Information Technology;
- Special education in Information Security required;
- Major experience in the configuration and tuning of SIEMs (3 years);
- Knowledge of ArcSight is an advantage;
- Experience in Security Operations and as Business Analyst;
- Experience in System Administration, Network Security, Information Security Policies, Network Troubleshooting, Firewall Administration, Network Protocols, Routers, Hubs, and Switches;
- Strong analytical thinking, ability to oversee complex problems;
- Skilled in dealing with sensitive matters and people;
- Ability to work independently and without direct supervision;
- Well versed in English, orally and in writing.
We offer
Security IT is a group-wide function which ensures integrated, secure and risk-aware IT operations for Investment bank by offering best fit, easy to leverage, reliable and cost effective security services, tools, processes and expertise across all business groups.
We seek for an IT Security Engineer to join the global Cyber Security Services team. The team is responsible for building and governing the firm's overall cyber security service.
You should have a strong background in cyber security, with a specialization in Security Information and Event Management (SIEM).