Senior Security Analyst – L2/L3

About the role

Quadcode is seeking a Senior Security Analyst (L2/L3) to strengthen its Security Team. You will work in an Agile environment, collaborating with infrastructure, NOC, Ops and Compliance teams to turn security signals into actionable findings and coordinate incident response across cloud, hybrid and on‑premise environments.

Key responsibilities

• Develop and maintain event correlation rules and detection logic.
• Create, automate and refine incident‑response playbooks.
• Monitor, analyze and triage security events in real time.
• Lead or support incident‑response investigations and post‑mortem reviews.
• Coordinate vulnerability remediation and conduct attack‑emulation testing.
• Research and prototype new security tools and technologies.
• Run periodic incident‑response exercises and support compliance audits.
• Define secure configuration requirements for operating systems, networks and services.

Required profile

• Minimum 3 years of experience as a Security Analyst with L2 incident‑response duties.
• Strong automation skills, especially in Python.
• Hands‑on experience investigating incidents in distributed, remote‑work environments.
• Ability to collect, process and act on indicators of compromise.
• Proficiency in writing and testing correlation rules.
• Solid knowledge of modern OS security mechanisms and network, web‑app and cloud attack techniques.
• Fluent Russian (C1) and functional English (B1/B2) for cross‑team communication.

Required skills

• Splunk (or willingness to ramp quickly on Splunk).
• CheckPoint, Rapid, AWS, OpenStack.
• GitLab, Kubernetes, Infrastructure‑as‑Code.
• Python, Linux, Windows, macOS.
• MITRE ATT&CK framework.
• Network traffic analysis.
• Incident‑response methodology and playbook automation.

What we offer

• Work with a modern, cloud‑centric tech stack.
• Opportunities to grow within a fast‑moving fintech SaaS company.
• Agile 2‑week sprint process with collaborative tools (Slack, Confluence, TargetProcess).
• Business‑hour schedule with paid overtime for incident work.