{"id":2503658,"url":"https://alion.io/job/ucom-information-security-engineer-infrastructure-secops","title":"Information Security Engineer (Infrastructure & SecOps)","company":{"id":57209,"name":"Ucom","domain":"ucom.am","url":"https://alion.io/company/ucom","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Spark","truth_index":{"grade":"B","score":75,"open_postings":6,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Armenia"],"countries":["AM"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19000,"max_usd":46000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Bash","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"DHCP","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"Linux","optional":false},{"name":"Nessus","optional":false},{"name":"Nmap","optional":false},{"name":"OpenVAS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Sysmon","optional":false},{"name":"TCP/IP","optional":false},{"name":"Tcpdump","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Wireshark","optional":false},{"name":"CyberArk","optional":true},{"name":"Docker","optional":true},{"name":"Hyper-V","optional":true},{"name":"VMWare","optional":true}],"status":"live","first_seen_at":"2025-11-27T00:00:00Z","employer_posted_date":"2025-11-27","last_verified_at":"2026-10-16T14:14:03Z","board_verified":true,"closed_at":null,"days_open":323,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":323},"description":"Role Overview\nWe are seeking a hands-on Information Security Engineer with a strong foundation in IT systems administration or network engineering. In this role, you will go far beyond monitoring dashboards and vendor alerts. You will analyze system and network architecture, identify underlying technical vulnerabilities, implement hardening controls across on-prem operating systems and network infrastructure, and build automated security workflows.\nKey Responsibilities\nInfrastructure Hardening & Security Architecture\nAudit and technically harden on-premises infrastructure (Windows Server, Linux, Active Directory, hypervisors, network appliances) based on CIS Benchmarks and industry best practices.\nDesign and implement architectural security controls, including network microsegmentation, tiered administrative models (Active Directory Tiering Model), Privileged Access Management (PAM), and secure configurations for reverse proxies and internal services.\nSecOps, Incident Response & Threat Hunting\nAnalyze low-level security events: parse raw packet captures (pcap), trace system calls, and audit raw event telemetry across Windows Event Logs, Sysmon, and Linux auditd.\nOnboard and normalize log sources, author custom detection logic, and fine-tune SIEM/EDR alerting rules beyond out-of-the-box templates.\nLead technical incident triage, conduct Root Cause Analysis (RCA), and isolate attack vectors to prevent recurrence.\nVulnerability & Attack Surface Management\nExecute infrastructure vulnerability scans, manually validate findings to eliminate false positives, and build actionable technical remediation roadmaps with IT operations.\nMaintain attack surface visibility and technical asset inventory.\nAutomation & Security Tooling\nAutomate recurring security tasks, configuration compliance checks, and log parsing using scripting languages (PowerShell, Python, Bash).\nAdminister, deploy, and maintain core enterprise security platforms, including PAM (Privileged Access Management), EDR, and DLP solutions.\nTechnical Compliance & Audits\nTranslate ISO/IEC 27001 requirements and corporate security policies into technical infrastructure controls.\nCollect and generate technical audit evidence, configuration baselines, and verification reports.\nRequired Qualifications\n Hands-on Infrastructure Background: 3+ years of direct experience in Systems Administration (Windows/Linux), Network Engineering, or SecOps / L2+ SOC engineering.\n Deep Networking Knowledge: Strong understanding of the TCP/IP stack, DNS, DHCP, routing protocols, VLANs, TLS/SSL, and packet-level inspection tools (Wireshark, tcpdump).\n Operating Systems & Identity Architecture: In-depth knowledge of Active Directory internals (Kerberos, NTLM, Group Policy Objects, DACLs/SACLs), authentication protocols, OS-level service hardening, and privilege separation.\nScripting & Automation: Proven ability to write scripts in PowerShell, Python, or Bash for system administration, log analysis, and API integrations.\n Security Tooling & Log Analysis: Practical experience with vulnerability assessment tools (Nmap, Nessus/OpenVAS) and hands-on log analysis in SIEM/EDR environments.\nPreferred Qualifications\nPractical experience deploying or maintaining PAM platforms (e.g., JumpServer, CyberArk) and enterprise DLP systems.\nWorking knowledge of virtualization and container platforms (Hyper-V, VMware, Docker).","description_format":"text","description_chars":3390,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Telecommunications"],"lifecycle":[{"event":"open","at":"2026-10-14T06:59:45Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.154,"p_room":0.28,"age_days":323,"expected_fill_days":20,"reasons":["conf:1","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/ucom-information-security-engineer-infrastructure-secops","json_url":"https://alion.io/job/ucom-information-security-engineer-infrastructure-secops.json","meta":{"generated_at":"2026-10-16T14:59:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14722,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":57209},"rest":"https://alion.io/mcp/rest/get_company?id=57209"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fucom-information-security-engineer-infrastructure-secops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fucom-information-security-engineer-infrastructure-secops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fucom-information-security-engineer-infrastructure-secops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ucom-information-security-engineer-infrastructure-secops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fucom-information-security-engineer-infrastructure-secops"}]}