SOC engineer

About us

Are you passionate about FinTech and ready to make a tangible impact in a dynamic company where your decisions shape the future? Altery could be the next chapter in your professional journey!

We are looking for a SOC Administrator to join our Security Operations Center (SOC) team and help strengthen our monitoring capabilities in emerging technology areas such as cloud platforms (e.g., AWS), AI solutions, and crypto systems.
This role is critical to enhancing threat detection, incident response, and the implementation of proactive security measures.

What you'll be doing

Integration of new data sources into the SOC, including AWS, AI platforms, and crypto systems.

Development and refinement of detection rules for identifying suspicious activity in logs.

Automation of incident response processes using playbooks and orchestration tools.

Conducting Red Team tests and attack simulations in accordance with DORA standards and others.

Active participation in threat hunting and continuous improvement of the threat detection system.

Maintenance and updates of existing SOC tools to ensure their relevance and effectiveness.

Implementation of new tools and solutions (including open-source and AI tools) to enhance SOC capabilities.

Collaboration with other teams to align SOC functions with technical and business requirements.

Participation in on-call rotations and real-time incident response.

Preparation and maintenance of internal SOC documentation, procedures, and knowledge bases.

What You’ll Bring To Us

5+ years of experience in the field of information security, preferably within a SOC or related areas.

Hands-on experience in administering and configuring the ELK stack (Elasticsearch, Logstash, Kibana).

Solid knowledge of Windows Server and Linux (Ubuntu) administration, including practical experience with Active Directory.

Scripting and automation skills using Bash, PowerShell, or Python for security and incident response tasks.

Experience in configuring and maintaining Incident Response Platforms (IRP) and SOC automation tools.

Proficiency in writing correlation rules, custom parsers, and integrating non-standard data sources into SIEM systems; strong knowledge of regular expressions (regex).

Understanding of security specifics in environments using AWS, AI platforms, and crypto systems — particularly in the areas of log collection and incident analysis.

Fluency in English .

What we offer

Team and our Product: We are team players and we are passionate about our
product and understand what we aim to achieve and the impact it will make.

Growth Opportunities: You can Influence and shape our story while advancing your career.

Flexibility: We always listen to our people and can be flexible with arrangements.

Hybrid or Remote Working: We don't expect you to be in the office every day.

Local Market Perks: Enjoy insurance coverage, local perks, and beautiful offices.

Why to join us
We may not be perfect, but our strength lies in our resilience. Facing challenges with our expertise, positive attitude, and a supportive environment where everyone relies on one another gives us confidence in what we do. We empower our people to make decisions, explore, and experiment — micromanagement isn’t our style. We reward those who take on additional responsibilities and go the extra mile.

We are proud of how diverse and unique we are. We thrive on diverse views, love learning from one another, and believe that our differences fuel our curiosity