Senior Security Engineer

Detection & Security Incident Response: Responding to and handling ICT security incidents, alongside operational support for the monitoring process.

Security Tools & Solutions: Maintaining, evaluating, and implementing new cybersecurity tools and solutions.

Vulnerability Management: Managing vulnerability scans, as well as executing the vulnerability assessment and mitigation process for networks, web & mobile environments, on-premises, and cloud infrastructure in cooperation with technology teams.

Threat Modeling & Assessment: Supporting the threat modeling process from an attacker’s perspective, including reviewing and testing IT systems for secure configuration.

Best Practices & Training: Establishing and promoting security best practices, including preparing and conducting cybersecurity training sessions.

Minimum 5 years of technical experience in the IT security domain (e.g., Security Engineer, Pentester, L3 SOC Analyst).

Practical technical knowledge and experience in either Blue Teaming (monitoring, incident handling and analysis, security tool maintenance) or Red Teaming (penetration testing, vulnerability assessment).

Experience conducting vulnerability scans, risk assessments, and creating technical documentation, procedures, and security guidelines.

Practical knowledge of security controls for operating systems, computer networks, web/mobile applications, and cloud environments.

Strong skills and experience in conducting training sessions and collaborating with development teams, DevOps, and business stakeholders.

Good command of English enabling effective communication.

Knowledge of industry standards, regulations, and best practices supported by training, courses, or certifications (e.g., OSCP, CEH, CISSP, ISO/IEC 27001, etc.).

Practical experience in managing the ICT incident response process and security tool architecture.

Practical scripting and automation skills (e.g., Python, Bash) and familiarity with CI/CD processes.