Cyber ​​security specialist (Security Engineer) in Agenciya oboronnih zakupivel DOT

The DOT Defense Procurement Agency is a state enterprise engaged in the procurement of equipment, ammunition, UAVs, food, clothing, fuel and lubricants for the Armed Forces and the Defense Forces.

Our mission: we provide the Defense Forces and develop the national defense industry for the stability and defense capability of Ukraine.

Our vision: driver of the development of the system of support of the Defense Forces of Ukraine according to NATO standards.

We are currently looking for a Cyber Security Engineer who will be responsible for building and maintaining cyber defense systems, implementing security solutions and working with the team to ensure the reliability and security of digital products for the military.

Job duties:

1. Cloud Security Management (Azure):

• configuration and support of Microsoft Defender, Sentinel, Intune, Entra, Purview, Azure Firewall

• SIEM (Microsoft Sentinel)
• EDR/XDR (Microsoft Defender, Palo Alto)
• WAF, IDS/IPS (Palo Alto)
• CASB, DLP (Microsoft Purview, Intune)

• development and support of IR playbooks
• automation integration (SOAR)

• work with Tenable (scanning, analysis, patch execution control)
• SLA negotiation and patch control

• interaction with IT, DevOps, AppSec to implement security controls
• participation in security committees and risk discussions

Requirements for candidates:

1. Deep understanding of the OSI model, TCP/IP protocols (DNS, HTTPS, SSH/Telnet, LDAP/DC/AD)
2. Windows/Linux administration experience
3. Basic understanding of SQL, IIS, Nginx
4. Experience in implementing and working with SIEM, EDR/XDR, WAF, IDS/IPS, CASB, DLP
5. Knowledge of incident response and vulnerability management processes
6. Understanding the principles of threat hunting and DFIR (Digital Forensics & Incident Response)

Will be an advantage:

1. Experience with other SIEMs (Splunk/ELK/ArcSight) and the ability to quickly adapt to new tools.
2. Practical application of MITER ATT&CK (construction of detections, evaluation of coverage).
3. Involvement in incident response: co-authoring/supporting IR?playbooks, interacting with SecOps/SOC.
4. Basic skills of forensics and collection of digital artifacts.
5. Ability to work with automation and IaC tools (SOAR experience a plus).
6. Scripting skills: Bash, Python, PowerShell
7. Understanding risk assessment principles for prioritizing remediation in relation to Governance/AppSec.

Tools and technologies:

1. Microsoft Azure ecosystem: Defender, Sentinel, Intune Admin Center, Entra Admin Center, Purview, Azure Firewall
2. Tenable (vulnerability scanning)
3. Palo Alto (NGFW, WAF, IDS/IPS)
4. Other SIEM, EDR/XDR, CASB, DLP, NGAV

We offer:

• A team where everyone is important: we are a team of like-minded people with mutual respect and support.

• Transparency and systematicity: clear goals, clear internal communications and a systematic approach.

• Professional growth and training: we promote the continuous development of our employees.

• Comfortable start: a structured adaptation process awaits you and the support of a mentor who will help you quickly get up to speed.

• Competitive conditions: official employment, social guarantees, competitive wages and the opportunity to work on the largest projects in the country.

• Comfort and working conditions: a modern, cozy office within easy reach of the metro, equipped with shelter and uninterrupted internet.

Learn more about our activities and corporate culture:

• Instagram

• Linkedin

• Facebook

Joining our team, you will get a chance to personally create a fundamental reform of the provision of the Defense Forces of Ukraine and make your contribution to the victory of Ukraine.

Ready to turn your expertise into a real contribution to victory? Send your resume now!

*Please note: by sending your resume, you automatically consent to the processing of your personal data in accordance with the law.

**Due to the volume of feedback we receive, feedback will only be provided to those candidates whose experience and qualifications most closely match the requirements of the position.