Principal SME - NSEC Baselines Technical Requirements Analyst

Mindbox is a tech-driven company connecting top IT talents with technology projects for leading enterprises across Europe. The role is part of the Global Defense Engineering team, focusing on defining and maintaining network security control requirements and standards aligned with industry best practices, cybersecurity frameworks, and regulatory compliance.

• Strong stakeholder management and ability to communicate complex technical concepts to diverse audiences
• Excellent understanding of cybersecurity principles, network security controls, and compliance requirements
• Extensive knowledge of network infrastructure hardening requirements
• Experience securing DDI products, network layer encryption services, and network management solutions
• Background in information systems, architecture, and defense-in-depth capabilities
• Familiarity with industry cybersecurity frameworks and standards
• Experience working in integrated on-prem and cloud environments, including SaaS connectivity
• Relevant certifications in cybersecurity, risk management, and network technologies are a plus
• Strategic thinker with strong analytical and problem-solving skills
• Ability to manage multiple concurrent workstreams and adapt to changing priorities
• Excellent communication and interpersonal skills
• Collaborative mindset and willingness to share knowledge

• Collaborate with Control Owners to define and maintain network security control requirements aligned with risk appetite
• Support NSEC Capability Leads in developing and validating domain standards and ensuring traceability to technology configurations
• Act as SME for network services security (e.g., DDI – DNS, DHCP, IPAM, NTP) and network management platforms (monitoring, alerting, configuration management)
• Define and maintain secure baseline configurations for network infrastructure and services
• Provide guidance and education to stakeholders on control requirements and compliance
• Analyze network and cybersecurity data to support decision-making and evidence control effectiveness
• Drive continuous improvement in network security posture and ensure compliance with global standards
• Build knowledge-sharing resources and FAQs for service delivery teams