Cybersecurity Specialist (m/f/n)

The position is for a Cybersecurity Specialist to join a client team working on a project for an EU institution located in Warsaw. The client company is Shimi.

• Higher education.
• At least 5 years of experience in this or similar position.
• At least 8 years of experience in the IT industry.
• Experience in PKI operations.
• Experience in operations and maintenance of security monitoring platforms (Splunk, Sentinel, Darktrace).
• Experience in risk-based vulnerability management services with Tenable, including penetration testing coordination.
• Experience deploying and managing PAM platforms.
• Experience in application security testing with CheckMarx SAST and DAST.
• Experience in implementing controls aligned with Zero Trust Architecture.
• Hands-on experience as an Information Security Administrator or Specialist.

Nice to have:

• Certifications: At least 3 among GCED, GPPA, GCCWN, GCUX, GCCC, SSCP, CCSP, CISSP, CSSLP, GSEC, ECSA, SCPO (or equivalent internationally recognized certifications).
• Strong knowledge of ISO 27000 family, SANS CIS critical security controls, and OWASP standards.
• Knowledge of network protocols (SMTP, NTP, DNS, LDAP, DHCP, PKI/CA) and Identity and Access Management (IAM) solutions.
• Understanding of secure coding practices, SDLC, and security testing.

• Provide cybersecurity support to users/customers and ensure functioning of integrated security solutions.
• Securely configure, maintain, and upgrade systems, services, products, and infrastructure.
• Implement, monitor, and assure performance of cybersecurity controls and procedures.
• Document and report on security status, configurations, and update operational procedures.
• Collaborate with IT personnel on security actions and network/system teams to develop solutions.
• Apply and manage technical patches for vulnerabilities.
• Assist in designing, implementing, and supporting security technologies (access, filtering, email, AV, DLP, cloud, mobile).
• Participate in information security reviews and audits.
• Monitor security systems, respond to events/alerts, and troubleshoot infrastructure faults.
• Evaluate and recommend secure configurations and security tools.
• Implement security changes following ICT change management procedures.
• Identify, translate, and negotiate high-level security requirements with stakeholders.
• Ensure service continuity for managed components per SLAs.

This position requires holding a security clearance at the “RESTREINT UE/EU RESTRICTED” level.