System Security Engineer

RedCore is an international business group that creates technological solutions for digital markets.

Our products and services cover fintech, marketing, e-commerce, customer service, communications, and regulatory technologies.

Powering Growth from the Core — this is the key mission laid under RedCore’s strong foundation. This is how we consistently stay ahead: by evolving and creating scalable solutions, while remaining committed to open and transparent communication with our partners.

We're looking for a System Security Engineer to join our team!

Requirements:

• 5+ years in cybersecurity, including SOC engineering, SIEM, or detection engineering.

• Deep understanding of SOC operations, detection engineering, incident response, threat intelligence, threat hunting, DFIR, and SOC engineering.

• Hands-on experience with SIEM, EDR/XDR, NDR, threat intelligence platforms, and incident management systems.

• Knowledge of MITRE ATT&CK, and SOC maturity models, with experience assessing monitoring maturity and defining a target state and roadmap.

• Solid grasp of monitoring architecture: log collection and processing, data quality, and the trade-offs between visibility, cost, and operational load.

• Proven experience designing and tuning detections on application and infrastructure telemetry.

Responsibilities:

• Assess the maturity of the security monitoring function (data sources, pipelines, detections, processes, tooling) against industry good practice and the organization's threat landscape. Turn the findings into a prioritized, evidence-based improvement roadmap.

• Own the monitoring architecture: data sources, log pipelines, SIEM/analytics platforms, and their reliability, scalability, and cost. Define standards for log onboarding, normalization, and data quality.

• Design and evolve the detection engineering lifecycle: use-case management, coverage analysis, testing and validation, tuning, and retirement. Build detections from available telemetry and relevant threat scenarios, and measure their effectiveness.

• Use incident investigations and root cause analysis as inputs for systemic improvements to telemetry and detections.

• Automate repetitive monitoring, enrichment, and response tasks, prioritizing by the value they bring to SOC workflows.

• Work with the SOC, security, engineering, and infrastructure teams to onboard new services into monitoring by design. Provide technical guidance to SOC analysts.

• Maintain architecture and operational documentation so that decisions, integrations, and procedures stay transparent and transferable.

Benefits:

• An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance, and more

• Great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset is guaranteed

• Modern corporate equipment based on macOS or Windows, and additional equipment is provided

• Paid vacations, sick leave, personal event days, days off

• Corporate health insurance program for your well-being

• Referral program - enjoy cooperation with your colleagues and get a bonus;

• Educational programs: regular internal training sessions, compensation for external education, attendance at specialized global conferences

• Rewards program for mentoring and coaching colleagues

• In-house Travel Service

• Multiple internal activities: online platform for employees with quests, gamification, presents and news, RedCore clubs for movie / book / pets lovers, special office days dedicated to holidays

• Corporate events, team buildings