{"id":3466597,"url":"https://alion.io/job/si-group-junior-information-security-engineer","title":"Junior Information Security Engineer","company":{"id":4486865,"name":"SI-Group","domain":"sigroup.com.ua","url":"https://alion.io/company/si-group-2","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Ukraine"],"countries":["UA"],"hiring_countries":["UA"],"hiring_countries_total":1,"salary":{"min":900,"max":1100,"currency":"USD","period":"month","gross":false,"usd_annual":13200},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"DNS","optional":false},{"name":"ETL/ELT","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"OPNsense","optional":false},{"name":"pfSense","optional":false},{"name":"Power BI","optional":false},{"name":"PowerShell","optional":false},{"name":"Proxmox VE","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Snort","optional":false},{"name":"Suricata","optional":false},{"name":"Sysmon","optional":false},{"name":"TCP/IP","optional":false},{"name":"Tcpdump","optional":false},{"name":"VPN","optional":false},{"name":"Wazuh","optional":false},{"name":"Windows","optional":false},{"name":"Wireshark","optional":false}],"status":"live","first_seen_at":"2026-10-08T11:05:23Z","employer_posted_date":null,"last_verified_at":"2026-10-08T11:05:23Z","board_verified":false,"closed_at":null,"days_open":21,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":21},"description":"Інженер з моніторингу безпеки (Wazuh, Suricata)Про SIG\n\nSIG — фінансовий холдинг: лізинг і споживче кредитування. Ми з нуля будуємо моніторинг безпеки під вимоги Постанови НБУ № 143 на базі Wazuh (SIEM) і Suricata (IDS/IPS на OPNsense).\n\nГоловне про роль: ви не підтримуватимете чужу систему, а будуватимете SOC-моніторинг з першого дня: від підключення джерел до переходу IPS у режим блокування.\n\nЩо ми пропонуємо\n\nФормат: [Віддалено / Гібрид, Київ]\n\nГрафік: [Пн–Пт, 09:00–18:00 / чергування On-Call]\n\nЗарплата: [900-1100$]\n\nОформлення: [Дія.City / ФОП / ТК]\n\nПроєкт з нуля з реальним впливом на архітектуру моніторингу.\n\nВаші задачі\n\nМоніторинг і розслідування\n\nЩоденний тріаж алертів Wazuh і Suricata.\n\nРозслідування інцидентів: зіставлення логів хостів, DNS, VPN-сесій.\n\nWazuh (SIEM)\n\nПідключення джерел: Windows/Sysmon, Linux, M365/Entra ID, Kubernetes.\n\nСтворення декодерів і правил кореляції за MITRE ATT&CK.\n\nКонтроль ситуації «джерело замовкло».\n\nSuricata (IDS/IPS)\n\nРозбір false positive і тюнінг сигнатур (suppress / threshold).\n\nВиключення для легітимного трафіку: бекапи, ETL.\n\nПлавний перехід з IDS у режим IPS.\n\nКомплаєнс (НБУ № 143)\n\nКонтроль повноти журналювання та зберігання подій від 1 року.\n\nЩо ми очікуємо\n\nВід 2 років у SOC або моніторингу безпеки на рівні L2.\n\nДосвід з будь-якою SIEM; Wazuh є сильним плюсом.\n\nРозуміння IDS/IPS (Suricata / Snort), читання pcap у Wireshark, tcpdump.\n\nАналіз логів Windows (Security Event ID, Sysmon) і Linux (auditd, journald).\n\nМережі: TCP/IP, routing, NAT, VPN (WireGuard, OpenVPN, IPsec).\n\nСкриптинг для автоматизації рутини: Bash, PowerShell або Python.\n\nБуде плюсом\n\nOPNsense / pfSense, Proxmox, Kubernetes.\n\nЛоги M365, Entra ID, аудит Power BI.\n\nСертифікати BTL1, Security+, CySA+.\n\nЕтапи відбору\n\nHR-скринінг: 30 хв.\n\nТехнічне інтерв'ю: 1 год.\n\nПрактика: розбір знеособлених алертів Suricata / Wazuh.\n\nОфер.\n\nХочете будувати SOC з нуля?\n\nНадсилайте резюме. Буде плюсом, якщо коротко опишете SIEM чи IDS/IPS, з якими працювали, і найцікавіший інцидент, який розслідували.","description_format":"text","description_chars":2035,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Ukraine","iso":"UA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-29T15:24:45Z"}],"visa":[],"liveness":{"score":48,"band":"ok","label":"Likely open","p_open":0.85,"p_active":0.76,"p_room":0.75,"age_days":21,"expected_fill_days":25,"reasons":["seen:21","win:late","comp:junior"],"computed_at":"2026-10-30T00:13:52Z"},"pay":{"stated_usd_annual":13200,"is_top_pay":false},"html_url":"https://alion.io/job/si-group-junior-information-security-engineer","json_url":"https://alion.io/job/si-group-junior-information-security-engineer.json","meta":{"generated_at":"2026-10-30T00:13:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":216,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4486865},"rest":"https://alion.io/mcp/rest/get_company?id=4486865"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsi-group-junior-information-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsi-group-junior-information-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsi-group-junior-information-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/si-group-junior-information-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsi-group-junior-information-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3466597}},{"tool":"search_jobs","arguments":{"company":"sigroup.com.ua","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3466597},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}