Search Remote Jobs

Security Operations Centre Specialist

Job not on LinkedIn

🔥 1 minute ago

🇺🇦 Ukraine – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

Where this job comes from

Posted on RISK's careers page, not through a job board

First seen by Remote Rocketship 1 minute ago

Logo of RISK

RISK

1001 - 5000 employees

🎯 Recruiter

Recruitment

RISK is a company whose website content indicates a careers site and recruitment portal. The site provides cookie management and privacy information, job listings, and an employee login; the careers platform appears to be powered by Teamtailor. The visible content focuses on hiring and candidate/employee access rather than specific products or industry verticals.

📋 Description

• Manage and support daily SOC operations, including security incident analysis, triage, investigation, and response • Monitor security alerts, conduct proactive Threat Hunting, and determine incident response, mitigation, and recovery actions • Detect, analyze, and mitigate DoS/DDoS attacks across network, transport, and application layers (L3/L4/L7) • Configure, maintain, and optimize SIEM, EDR, DLP, and DDoS protection solutions • Continuously improve detection accuracy by reducing False Positives and optimizing security monitoring processes • Monitor AWS, Azure, and Google Workspace environments for security threats • Develop and implement automation scripts and workflows for SOC operations and incident response • Investigate security incidents, document findings, prepare reports, and provide recommendations • Conduct security assessments of new systems, applications, and cloud/on-premises infrastructure • Collaborate with IT, Infrastructure, and Security teams to improve threat detection and security controls

🎯 Requirements

• Proven hands-on experience in SOC operations, security incident detection, analysis, and response • Strong experience identifying and mitigating DoS/DDoS attack vectors, including SYN floods, UDP amplification, HTTP/HTTP2 floods, DNS reflection, and slow-and-low attacks • Practical experience with DDoS mitigation solutions such as Cloudflare, Akamai Prolexic, AWS Shield, Radware, Imperva, Arbor Networks, or similar WAF/Anti-DDoS technologies • Hands-on experience with SIEM platforms, including detection rule creation, configuration, tuning, and optimization • Practical experience working with EDR and DLP solutions, including security alert monitoring, investigation, and incident response • Experience securing cloud environments and investigating security incidents across AWS, Azure, and Google Workspace • Strong scripting and automation skills using Python, Bash, or PowerShell • Proven experience reducing False Positives and optimizing detection logic • Solid understanding of network and system security, including TCP/IP, UDP, DNS, SSH, SSL/TLS, HTTP protocols, and common cyberattack techniques • Experience working with Windows and Linux/Unix operating systems • Practical Threat Hunting experience • Strong analytical and problem-solving skills, with a data-driven approach to security incident investigation

🏖️ Benefits

• Children Allowance • Mental Health Support • Sport Activities • Language Courses • Automotive Services • Veterinary Services • Home Office Setup Assistance • Dental Services • Books and Stationery • Training Compensation • Massage

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok