IT Security Engineer

• Proven track record in IT security engineering, SecOps, or infrastructure security within an enterprise environment.
• Deep practical knowledge of endpoint security, network security controls, identity and access management (IAM), and cloud security.
• Hands-on experience with vulnerability management workflows, SIEM/EDR tooling, alert triage, and log analysis.
• Microsoft security certifications preferred (e.g., AZ-500, SC-200, SC-300, or SC-100).
• Understanding of risk management, audit evidence collection, and major security compliance standards.
• Familiarity with modern AI security trends and integrating automation into detection and response workflows.
• Strong problem-solving mindset, global perspective, and fluent English communication skills.

• Implement, maintain, and enhance technical security controls across servers, networks, cloud services, and endpoints.
• Monitor security events, analyze alerts, and coordinate rapid response and remediation actions.
• Lead technical investigations for security incidents, perform root cause analysis (RCA), and implement preventative measures.
• Drive end-to-end vulnerability management: identification, assessment, prioritization, remediation tracking, and reporting.
• Enforce system hardening, secure baseline configurations, and patch compliance across on-prem and cloud platforms.
• Support technical security assessments, audits, compliance validations, and risk-reduction initiatives.
• Partner with IT architects, platform engineers, and vendors to ensure security-by-design across all infrastructure services.
• Automate security monitoring, alert handling, and incident response processes to improve operational maturity.

Please be informed that the data controller is RED Global (hereinafter "controller"). You have the right to request access to your personal data, their rectification, erasure or restriction of processing, the right to object to processing, as well as the right to data portability and to lodge a complaint to the supervisory authority. Personal data will be processed for the purpose of the recruitment process. Provision of data to the extent resulting from the Act of 26 June 1974 Labour Code is mandatory. In the remaining scope, providing data is voluntary. Refusal to provide mandatory data may result in the impossibility to carry out the recruitment process. The Administrator processes mandatory data on the basis of a legal obligation incumbent upon him/her, while with regard to additional data, the basis for processing is consent. Personal data will be processed until the recruitment procedure is completed and for the period of the possibility of asserting potential claims, and in the case of consent to participate in future recruitment procedures - until the withdrawal of such consent. Consent to the processing of personal data can be withdrawn at any time. The recipient of the data is the Just Join IT service and other entities to whom we have entrusted the processing of data in connection with recruitment.