Incident Response (IR) / Security Engineer at MWDN (вакансія неактивна)

ABOUT THE PROJECT

This project involves cybersecurity with a focus on incident response and forensic activities to ensure protection against advanced threats.

REQUIREMENTS

– Relevant security certifications (e.g., GCIH, GCFA, GCED, GCIA, CISSP, or similar)
– Experience with threat hunting and detection engineering
– Familiarity with MITRE ATT&CK framework
– Experience working in enterprise or large-scale environments
– Experience with additional EDR/XDR platforms
– Cloud security investigation experience
– Scripting or automation skills (Python, Bash, etc.)

RESPONSIBILITIES

– Lead and execute incident response activities, including detection, analysis, containment, eradication, and recovery
– Perform advanced digital forensics and root cause analysis across endpoints and environments
– Act as a subject-matter expert for Elastic EDR, including investigation, tuning, and optimization
– Analyze security alerts, logs, and telemetry to identify malicious activity
– Develop and improve detection logic, response playbooks, and investigation workflows
– Support IDFR operations, including threat hunting and proactive investigations
– Collaborate with SOC, security engineering, and IT teams during incidents
– Produce clear incident reports, timelines, and post-incident recommendations
– Participate in on-call or high-severity incident handling as required

WHAT WE OFFER

– People-oriented management without bureaucracy
– The friendly climate inside the company is confirmed by the frequent comeback of previous employees
– Flexible working schedule
– Free English classes with native speakers
– Dedicated HR

COMPENSATION & BENEFITS

–