Information Security Engineer (Infrastructure & SecOps)

Ucom

- Audit and technically harden on-premises infrastructure (Windows Server, Linux, Active Directory, hypervisors, network appliances) based on CIS Benchmarks and industry best practices - Design and implement architectural security controls, including network microsegmentation, tiered administrative models (Active Directory Tiering Model), Privileged Access Management (PAM), and secure configurations for reverse proxies and internal services - Analyze low-level security events: parse raw packet captures (pcap), trace system calls, and audit raw event telemetry across Windows Event Logs, Sysmon, and Linux auditd - Onboard and normalize log sources, author custom detection logic, and fine-tune SIEM/EDR alerting rules beyond out-of-the-box templates - Lead technical incident triage, conduct Root Cause Analysis (RCA), and isolate attack vectors to prevent recurrence. - Execute infrastructure vulnerability scans, manually validate findings to eliminate false positives, and build actionable technical remediation roadmaps with IT operations - Maintain attack surface visibility and technical asset inventory

- Hands-on Infrastructure Background: 3+ years of direct experience in Systems Administration (Windows/Linux), Network Engineering, or SecOps / L2+ SOC engineering - Deep Networking Knowledge: Strong understanding of the TCP/IP stack, DNS, DHCP, routing protocols, VLANs, TLS/SSL, and packet-level inspection tools (Wireshark, tcpdump) - Operating Systems & Identity Architecture: In-depth knowledge of Active Directory internals (Kerberos, NTLM, Group Policy Objects, DACLs/SACLs), authentication protocols, OS-level service hardening, and privilege separation - Scripting & Automation: Proven ability to write scripts in PowerShell, Python, or Bash for system administration, log analysis, and API integrations - Security Tooling & Log Analysis: Practical experience with vulnerability assessment tools (Nmap, Nessus/OpenVAS) and hands-on log analysis in SIEM/EDR environments

Apply here https://ucom.spark.work/career/job/346/Information-Security-Engineer-Infrastructure-SecOps?sourceCode=a52c209f5135f733&lang=en Please mention in your application that you have learned about this position from MyJob.am