Security Analyst - SIEM & Threat Hunting Pro

EPAM Systems; EE. UU.; A distancia; USD 70.000 - 100.000; Jornada completa

Descripción de la vacante

EPAM Systems Inc. is seeking a talented Security Analyst with experience in Cyber/Information/Network/Cloud Security to monitor enterprise environments.

The role focuses on threat analysis of event data from multiple platforms, with on-shift rotation: 2 days on, 2 days off, 12-hour shifts. Responsibilities include monitoring on‑prem and AWS infrastructure for attacks, managing identity and access, building SIEM and SOAR detection rules, and developing playbooks.

Formación

• 1+ years of experience with SIEM solutions.
• Experience with SIRP/SOAR tools.
• Knowledge of Internet security and networking protocols.
• Familiarity with intrusions techniques and risk management concepts.
• Proficiency in English at a B2+ level.

Responsabilidades

• Monitor on-prem and AWS infrastructure for attacks and unusual activity.
• Monitor identity and access management for abuse of permissions.
• Create SIEM and SOAR detection and remediation scenarios as rules.
• Create, test and update playbooks.
• Perform threat hunting and support threat intelligence processes.
• Carry out other security operations activities with monitoring.
• Generate reports for technical and non-technical staff.
• Use analytic tools to identify threat patterns and vulnerabilities.

Conocimientos

SIEM concepts

Threat hunting

Incident response

English proficiency

Herramientas

Splunk

QRadar

ArcSight

LogRhythm

ELK

Wazuh

TheHive

Cortex

Phantom

XSOAR

Resilient

Descripción del empleo

EPAM Systems Inc. is seeking a talented Security Analyst with experience in Cyber/Information/Network/Cloud Security to monitor enterprise environments.

The role focuses on threat analysis of event data from multiple platforms, with on-shift rotation: 2 days on, 2 days off, 12-hour shifts. Responsibilities include monitoring on‑prem and AWS infrastructure for attacks, managing identity and access, building SIEM and SOAR detection rules, and developing playbooks.