Responsibilities:

• Drive infrastructure design discussions with other teams, including business stakeholders, enterprise architects, and software developers.
• Perform security reviews and document findings and recommendations.
• Facilitate deployments of our enterprise IAM solution in customer environments.
• Maintain an open-source SIEM Infrastructure.
• Operate a small SOC service.
• Stay up to date with new emerging threats and vulnerabilities.
• Be available for 24/7 on-call rotation to respond to critical security incidents, though call volume is expected not to be frequent.
• Participate in customer meetings - both pre-sales and post-sales.
• Respond quickly to security incidents and alerts, with target response time under 30 minutes for critical issues.

Your profile:

• 3+ years experience with AWS infrastructure.
• 3+ years of experience in security of infrastructure and networks as well as operating system hardening.
• Understanding of Identity and Access Management in large-scale environments - both at the infrastructure and application levels.
• Monitor and analyze security alerts from multiple sources including SIEM, EDR, and cloud security tools
• Perform incident triage, investigation, and response according to established procedures
• Manage and optimize SIEM rules, alerts, and dashboards to improve detection capabilities
• Create and maintain security documentation, playbooks, and incident response procedures
• Knowledge of both Linux and Windows Server operating systems.
• Practical familiarity with threat modeling and threat identification techniques.
• A holistic view of security using security-in-depth principles.
• Excellent English – written and verbal.
• Service-oriented and customer-centric mindset.
• Great level of autonomy.
• 
  Nice to have:
• BSc or MSc in any relevant IT field.
• Automation and scripting knowledge.
• Security certifications (e.g., Security+ certification)
• Experience with forensic analysis tools
• Knowledge of security frameworks and standards (ISO 27001, NIST, CIS)
• Python, Shell Script, PowerShell, or other scripting experience
• Experience with threat hunting techniques
• Experience with Azure.

If this role excites you, but you are worried that you don't fit all the requirements, please send your application anyway. We would love to get in touch!

Our recruiting process consists of...

• Send us your updated CV
• First interview (30 min)
• Technical Assessment
• Second interview (30 min)
• Offer
• Contract signing