Cybersecurity Specialist (m/f/n)

The role is with Shimi Sp. z o.o., providing cybersecurity services for a project with an EU institution located in Warsaw.

• Higher education.
• Minimum 5 years of experience in a similar cybersecurity position.
• At least 8 years of experience in the IT industry.
• Experience in Public Key Infrastructure (PKI) operations.
• Experience operating and maintaining security monitoring platforms including Splunk, Sentinel, and Darktrace.
• Experience in risk-based vulnerability management services with Tenable and coordination of penetration testing.
• Experience deploying and managing Privileged Access Management (PAM) platforms.
• Experience with application security testing using CheckMarx SAST and CheckMarx DAST.
• Experience implementing controls aligned with Zero Trust Architecture.
• Knowledge of security fundamentals including operating systems, network security, offensive and defensive security practices.
• Understanding of system vulnerabilities, threats, penetration testing, remediation, and risk analysis methods.
• Familiarity with ISO 27000, SANS CIS critical security controls, and OWASP standards.
• Knowledge of network protocols such as SMTP, NTP, DNS, LDAP, DHCP, PKI/CA.
• Practical experience managing Identity and Access Management (IAM) solutions.
• Knowledge of SDLC, secure coding practices, and performing security tests.
• Hands-on experience as an Information Security Administrator or Specialist.
• Strong communication skills for diverse stakeholders.
• Ability to integrate cybersecurity solutions complying with organizational policies.
• Skills in assessing security/performance and developing/testing secure code and scripts.
• Analytical troubleshooting and problem-solving abilities.

Required certifications (at least 3):

• GCED (GIAC Certified Enterprise Defender) or equivalent
• GPPA (GIAC Certified Perimeter Protection Analyst) or equivalent
• GCCWN (GIAC Certified Windows Security Administrator) or equivalent
• GCUX (GIAC Certified UNIX Security Administrator) or equivalent
• GCCC (GIAC Certified Critical Controls) or equivalent
• SSCP ((ISC)2 Certified Systems Security Practitioner) or equivalent
• CCSP ((ISC)2 Certified Cloud Security Professional) or equivalent
• CISSP (Certified Information Systems Security Professional) or equivalent
• CSSLP ((ISC)2 Certified Secure Software Lifecycle Professional) or equivalent
• GSEC (GIAC Certified Security Essentials) or equivalent
• ECSA (EC-Council Certified Security Analyst) or equivalent
• SCPO (SABSA Certified Security Operations & Service Management Practitioner) or equivalent

• Provide cybersecurity support to users/customers and ensure proper operation of integrated security solutions.
• Securely configure, maintain, and upgrade systems, services, products, and infrastructure.
• Implement, monitor, and assure performance of cybersecurity controls and procedures.
• Document and report security status, configurations, and update operational procedures.
• Work closely with IT and network/system teams on security actions and solutions.
• Apply and manage technical patches to address vulnerabilities.
• Assist in designing, implementing, and supporting security technologies (access, filtering, email, AV, DLP, cloud, mobile).
• Participate in information security reviews and audits.
• Monitor security systems, respond to events/alerts, troubleshoot infrastructure issues.
• Evaluate and recommend secure configurations and security tools for continuous improvement.
• Implement security changes following ICT change management procedures.
• Identify, translate, and negotiate high-level security requirements with stakeholders.
• Ensure service continuity for managed components according to defined SLAs.

This position requires security clearance at the “RESTREINT UE/EU RESTRICTED” level.