Senior Security Engineer

What does the function entail in general?

You will be working in our Security Operations Center.

1. Operational security management

• Detection of security threats. Using tools (e.g. EDR), a central logging and alert system (SIEM) but also issues reported by KBC employees via our mailbox.
• Analyses of security threats in cooperation with other technical teams and the (business) information security officers.
• We take countermeasures to counter possible vulnerabilities and reduce our risk.
• We work together with many teams to discuss different possible threats that can happen on their technologies. Analysis of those threats will result in defining scenarios and developing use cases based upon the logged data of their systems.
• Help think about tracking and monitoring our systems set up to detect threats.
• Make sure that all data needed for detecting those threats is available in our systems.

2. Application management of the systems used by the SOC team itself.

Key duties and responsibilities:

• Developing and testing new use case for the automatic detection of suspicious behavior on our systems;

• Adapting and optimizing existing use-cases to the ever-changing behavior of hackers;

• Finding the root cause of security alerts using extra contextual information such as server/system log files and the knowledge you have of attack methods, attackers and threats.

• Thinking with security architects and analysts on how we can improve our security monitoring and take it to the next level;

• Helping fine-tune and test our security alerts and incident/response procedures;

• Reporting to system managers and managers about security incidents and preventive/counter measures to be taken and this in a for them understandable language;

• Improving existing processes to prevent problems and avoid risks;

• Preparing the SOC for a new threat detection landscape in our endpoints

Your qualifications?

• We are looking for a senior profile. You have worked in a security Operations Center before.
  
• Security driven: You have a keen eye for cyber security risks, how to recognize them and how to prevent them
• You are a good communicator
• You have good analytical skills to help analyze security events and incidents and you are strong in conceptual thinking.
• You have experience in mentorship and coaching
• You have a broad view on IT Operating systems & middleware (Windows, Unix, Linux, databases) and networks
• You have good knowledge of malware types and cyber-attack techniques (the kill chain)
• You have experience with cloud applications (Azure , Azure AD or AWS)
• You have experience with Security tooling for detection and analysis
• You have experience with Incident response
• You have experience with Network security, firewall and IDS

We offer:

• Work-Life balance: 25-day annual paid holiday; regular team buildings and company parties.
• Personal Care: Additional medical insurance and pension plan.
• Fully covered Multisport card.

• An international and highly diverse work atmosphere.
• Hybrid way of working: flexible working time with home-office option.
• Career growth and development: Leadership Development Program, Internal Academies encouraging internal rotations, a wide range of trainings and free access to several learning platforms, language courses and more.
• Preferential terms for banking and insurance products & services offered by KBC Group companies in Bulgaria (loans rates, life and non-life insurance, etc.)
• Spot Awards to make you shine: Employee of the month, Employee of the Year, Exceptional achievements and others.
• Referral program: recommend a friend to a job and get a bonus.
• Other remarkable benefits: Marriage and Childbirth bonuses, paid Volunteer Day, many discounted offers from various providers.

If you find this job opportunity interesting and you recognize yourself in the above, apply via the button with your CV in English.

Join. Create. Innovate with us!