SOC Engineer

G5 Games is a game developer and publisher headquartered in Stockholm, Sweden. We have over 850+ talented professionals worldwide who work remotely or in one of our 10 locations. More than 20 years ago, the company became one of the first mobile game developers in the world.

You may know us from hit projects like Sherlock, Hidden City®, Mahjong Journey®, The Secret Society®, the Jewels series, and many others.

We are currently looking for a talented SOC Engineer (remote) to join our team.

What are you working on?

• Platforms: iOS, Android, Mobile

For which tasks (responsibilities)?

• Configuration and administration of the Security Information and Event Management (SIEM) system.

• Conducting in-depth security incident analysis, identifying root causes and impacts.

• Developing and updating correlation rules, scenarios, and reports to detect security incidents.

• Monitoring events and responding to security incidents.

• Implementing new technologies and tools in SOC operations to improve threat detection and response.

• Applying best practices for incident management and establishing processes based on international standards (NIST, SANS).

• Maintaining investigation logs and incident reports.

• Providing training for staff on security practices and the use of security monitoring tools.

• Offering recommendations and support for changes to corporate systems to enhance security.

• Writing and maintaining documentation (policies, processes) for the Security Operation Center.

What kind of professional are we looking for?

• Proven experience in configuring and administering Security Information and Event Management (SIEM) systems like Microsoft Sentinel, Splunk.

• Extensive knowledge and hands-on experience in security incident analysis, with the ability to identify root causes and assess potential impacts.

• Skills in developing and updating correlation rules, detection scenarios, and reporting mechanisms for identifying security incidents.

• Experience in real-time monitoring of security events and incident response.

• Familiarity with implementing advanced technologies and tools in SOC environments to enhance threat detection and response capabilities.

• Knowledge of best incident management practices and experience designing processes based on international standards (e.g., NIST, SANS).

Why do we enjoy working here?

• The opportunity to bring your ideas to life in an international company with a multimillion audience: G5 games are played by 250 million users worldwide.

• Official employment in one of our locations or remotely under a contract.

• Assistance with relocation that helps move to one of the countries where the company has offices: Armenia, Georgia, Kazakhstan, or Montenegro.

• Maintaining a work-life balance of employees: remote work and flexible hours, sports reimbursement, and health insurance payment.

• Charitable activities: you can initiate your own project with the company's support or participate in G5 Charity events.

• Opportunities for professional development: access to resources for creating your own projects within R&D, an internal educational platform, and training webinars covering various specialties.

• Bonus system: project profit bonus for project teams and a performance share program for key employees.

• Language courses: free English lessons, speaking clubs for all proficiency levels, and free study language of the country of relocation.

• Entertainment: corporate events and team buildings, master classes for adults and children, webinars with guest speakers, coffee talks, quizzes, and contests.

• Strong documentation skills for maintaining investigation logs and incident reports and developing policies and processes for the Security Operation Center.

• Experience in conducting training sessions for staff on security practices and the effective use of security monitoring tools.

• Ability to provide actionable recommendations and collaborate on system modifications to enhance corporate security posture.

• Relevant certifications in information security or SOC operations are preferred.