Monitoring/SOC Tier 1 Analyst

ICL Services is one of the biggest and oldest Russian IT companies currently in top 100 world IT outsourcing companies and key partner of Fujitsu. Today, the company works with more than 80 major clients from 30 countries. We are dynamic, determined, and provide a broad scope of services to some of the largest and most diverse companies in the world. For this, we are also well-respected and constantly strive to maintain our standards of professional excellence and ethical conduct.

What we offer:

• A full-time employment contracts
• An opportunity to work on challenging projects with some of the world's largest companies
• Compensation package (private health insurance, team-buildings, professional education and certification)
• Opportunities for advancement within the company:
  • 50% of employees got salary raise
  • 30% of employees had a career growth
• Opportunity to participate in various corporative programs (MVP - mentoring program)
• Opportunity to be a part of socially responsible business (various activities to support our employees and community generally). A highly professional, but very friendly team you will enjoy being a part of
• Overtime working hours are recorded and compensated
• Human corporative culture:
  • 80-85% of our employees appreciate humane corporate culture in ICL Services
  • 85-90% of employees says that they work with great people
• Professional education and certification – ICL genuinely value its employees and works continually on knowledge improvement across the business spectrum

Technical skills and responsibilities

• Precisely registers the defects in the form of incidents, requirements for providing services and standardized changes, using the attached instruments, categorizes and classifies them according to the instructions,
• Using a questionnaire and instructions, performs the initial diagnosis of incidents and requests, which is needed for their solving or transferring to the appropriate support team,
• Resolves incidents in accordance with the instructions,
• Conducts monitoring of customer’s IT infrastructure, using specialized instruments
• Security SIEM alerts monitoring
• Initial security alerts analysis with usage of official security tools and external Internet available tools agreed, triage and escalation to TIER 2 SOC Analyst
• Analysis to determine if the alert is a false positive (close the alert)
• Triages security alerts by priorities and escalation to the TIER 2 SOC Analyst if necessary
• High risk security alerts report to SOC2, IT Security Manager
• Security incident tickets creation with basic recommendations within ITSM system
• Collects data and context necessary descriptions on alerts and create cases to initiate incident responder work (Tier 2).
• Inform about high security events Tier 2 SOC Analyst and IT Security Manager, CAC Manager
• Ensure that automated polling, traps, and alarms are properly feeding into the SIEM dashboard, check for availability of SIEM functionality.
• Review of alerts and cases to ensure quality of work has been achieved and assigned to SOC2
• Monitoring and analysis of information security events
• Participation in projects to identify and investigate incidents of information security for external clients
• Participation in projects on development of recommendations on elimination of consequences of incidents and their prevention
• Preparation of proposals on optimization of the IS monitoring
• Good level of English (Upper-Intermediate or higher) is a must – all technical documentation is in English
• Russian – will be a plus
• Good understanding of IT infrastructure overall concepts AD/DNS/DHCP/e-mail/Switching/Routing
• Technical educations - desirable
• Work experience with any of ITSM and monitoring/SIEM systems
• Responsible and reliable
• Team work oriented
• Ready to work on shift basis (both day and night shift)
• Technical documentation writing experience

We are looking forward to receiving your resume. Our selection process consists of an introductory interview with the team in Belgrade, and a professional interview with our IT experts. We endeavor to make our selection process as quick and as transparent as possible – don't hesitate to ask if you have any questions. Please, bear in mind that only shortlisted candidates will be contacted for an interview.