Security Engineer

BrainRocket is a global company creating end-to-end tech products for clients across Fintech, iGaming, and Marketing. The company has a team of 1,300 employees and operates in multiple countries including Cyprus, Malta, Portugal, Poland, and Serbia.

Must-Have:

• 5 years of experience in IT infrastructure administration or information security roles.
• Advanced administration of macOS, Windows, and Linux operating systems, including secure configuration, system hardening, access control management, and troubleshooting at the OS level.
• Understanding of networking fundamentals, including IP networking, routing, switching, and network protocol behaviour relevant to security analysis.
• Basic knowledge of regulatory requirements and standards such as ISO27001, ISO27701, PCI DSS, GDPR, and others.
• Administration and configuration of EDR/XDR platforms, including policy management, detection rule tuning, incident investigation, and endpoint threat response.
• Configuration and administration of enterprise VPN solutions, including secure remote access management, authentication policies, and network access control.
• Administration and tuning of DLP systems, including policy development, data classification integration, and monitoring of data exfiltration risks.

Nice to have:

• Proficiency in working with simple scripts: bash, PowerShell, or Python.
• Understanding of the basic principles of virtualisation platform functionality.
• Experience in complex implementation or support projects of enterprise information security solutions such as MDM, SIEM, DLP, PAM, NGFW, Endpoint Security.
• Experience with deployment and administration of IDS/IPS solutions, including rule tuning and network threat detection.
• Experience with PaloAlto, Digital Guardian, OpenVPN security solutions.

System Administration:

• Manage security systems: DLP, XDR, Network VPN gateway.
• Implement and maintain security control policies to enhance security.
• Keep security system infrastructure updated and patched.
• Integrate security systems with new IT solutions and assets.
• Debug issues related to the security systems software and cooperate closely with vendor support.

Monitoring and Analysis:

• Continuously monitor network activity and systems load.
• Monitor and review vendor notifications about SaaS security system maintenance, critical vulnerabilities, new releases, and features.
• Identify and analyze potential threats and vulnerabilities in the security systems.

Incident Response:

• Respond to security incidents and provide 2-3 levels of support for the SOC team, coordinating incident response efforts.
• Escalate incidents to other teams as necessary.

Reporting, Documentation, and Continuous Improvement:

• Prepare technical documentation after implementation of new security controls and system configurations.
• Create basic instructions for security software for end users.
• Suggest improvements to security system configuration and incident mitigation.
• Participate in post-incident reviews and propose enhancements.

This is a full-time, office-based role (no remote/hybrid) in one of the hubs: Belgrade (Serbia), Lisbon (Portugal), Sofia (Bulgaria), Valencia (Spain, preferable), or Warsaw (Poland). The final location depends on business needs and feasibility of relocation from the candidate's current location.