Senior Cybersecurity Specialist / Administrator (K/M)

Astek is a company founded in 1988 in France that operates globally in engineering and IT consulting. It supports international clients across multiple industrial and technological sectors in developing and deploying products and services, contributing to their digital transformation. Astek employs over 10,000 professionals engaged daily in diverse technological and engineering projects.

• Minimum 8 years of professional IT experience
• Minimum 5 years of experience in a similar role
• Higher education degree
• English proficiency at least at B2 level with certification
• At least three certifications among CISSP, CCSP, SSCP, GCED, GPPA, GCWN, GCUX, GCCC, CSSLP, GSEC, ECSA, SCPO
• Knowledge of system development lifecycle (SDLC)
• Understanding of operating system and network security
• Knowledge of cybersecurity mechanisms and best practices
• Proficiency in offensive and defensive security techniques
• Secure programming skills
• Familiarity with vulnerabilities, threats, attacks, penetration testing, and risk analysis
• Knowledge of ISO 27000 standards
• Familiarity with CIS Critical Security Controls
• Awareness of OWASP standards
• Understanding of SMTP, NTP, DNS, LDAP, DHCP, and PKI/CA protocols
• Ability to design and perform security testing
• Knowledge of Identity & Access Management
• Ability to prepare technical documentation and reports
• Strong analytical, communication, and problem-solving skills

Nice to have:

• Experience with PKI
• Experience with security monitoring platforms such as Splunk, Microsoft Sentinel, Darktrace
• Vulnerability management with Tenable
• Coordination of penetration tests
• Experience with Privileged Access Management (PAM) platforms
• Application security testing using Checkmarx SAST and DAST
• Experience implementing Zero Trust architecture mechanisms

• Provide cybersecurity support to users and clients
• Integrate, configure, maintain, and develop security solutions
• Securely configure systems, services, and products
• Implement security procedures and mechanisms
• Monitor the effectiveness of deployed security controls
• Support vulnerability management and coordinate penetration tests
• Operate security monitoring platforms and respond to incidents and alerts
• Support Identity & Access Management and Privileged Access Management solutions
• Participate in security reviews and audits
• Implement changes following change management procedures
• Design, configure, test, maintain, and develop cybersecurity infrastructure
• Create technical documentation and operational procedures
• Collaborate with IT teams, architects, engineers, and project managers
• Identify security requirements and implement them
• Diagnose and resolve cybersecurity issues
• Recommend improvements and secure configurations

Administrator of personal data is ASTEK Polska sp. z o.o. with registered office in Warsaw. Candidates have rights including access, correction, deletion, processing limitation, objection, data portability, and complaint filing regarding personal data processing. Data processed for recruitment purposes according to applicable law. Consent for additional data processing is voluntary and withdrawable. Contact [email protected] to exercise rights. Data recipients include Just Join IT platform and other entities processing data related to recruitment. Whistleblower procedure at ASTEK is available at https://astek.pl/sygnalisci/. Detailed privacy info at http://astek.pl/polityka-prywatnosci.