IT Security Officer

Callstack supports and inspires top industry leaders in shipping better digital products and services. They are a team of high-level experts in cross-platform development and consultancy, contributing to the React Native Community with open source projects and organizing international conferences and community meetups in Wrocław, Poland.

• Experience in IT Security, Cybersecurity, IT Infrastructure, or a similar role.
• Good knowledge of macOS, Windows, and Linux.
• Hands-on experience with endpoint security, MDM, IAM, MFA, SSO, and access management.
• Practical knowledge of network security, VPNs, firewalls, and DNS.
• Experience with security monitoring, vulnerability management, and incident response.
• Understanding of cloud security and public cloud platforms like AWS, Azure, or GCP.
• Familiarity with ISO 27001, GDPR, ISMS, and risk management.
• Knowledge of SPF, DKIM, and DMARC is a plus.
• Strong analytical, problem-solving, and communication skills.
• Good English and a proactive, ownership-driven mindset.

• Manage and continuously improve IT security policies, procedures, and controls.
• Maintain and develop security tools, including SentinelOne EDR/XDR, SIEM, and Kandji MDM.
• Monitor security alerts, investigate threats, and coordinate incident response and remediation.
• Manage vulnerability management, endpoint security, access controls, MFA, VPN, and network security.
• Oversee backups, disaster recovery, and data protection.
• Support cloud and email security, including SPF, DKIM, and DMARC.
• Coordinate security audits, penetration tests, risk assessments, and ISO 27001/GDPR compliance.
• Maintain ISMS documentation, security KPIs, and compliance records.
• Support vendor security assessments and customer security questionnaires.
• Promote security awareness and continuously identify opportunities to improve and automate security processes.

In accordance with Article 13 of Regulation (EU) 2016/679 (GDPR), Callstack informs about data processing as data controller for recruitment purposes, legal basis, rights including objection and withdrawal of consent, data retention period (~270 days), possible data disclosure to service providers and public authorities, and GDPR rights. Data provision is voluntary but required for recruitment participation.