Starszy Inżynier IT (k/m)

Agro Aplikacje is a modern in-house software company supporting innovative IT solutions necessary for the tasks of the Agency for Restructuring and Modernization of Agriculture. They design, simplify, and expand systems, using modern technologies with a flexible approach to support the digitization of the Polish agricultural sector. The position is in the Department of Infrastructure and Security, Cybersecurity Services Division, Network Services Team, based in Warsaw with hybrid work.

• Higher education in IT or related field.
• Minimum 5 years of experience in roles such as application administrator, infrastructure administrator, system administrator, IT services engineer, system engineer, or IT security engineer, especially in maintaining and deploying systems like SIEM, SOAR, XDR, DAM, PIM, PAM, Proxy, DLP, WAF, and CTI.
• Very good knowledge of system, network, and application security.
• Practical experience with tools such as Nessus, Metasploit, Burp Suite, Wireshark, and Nmap.
• Experience working with Red/Blue Teams.
• Ability to analyze logs, correlate events, and respond to incidents.
• Knowledge of security mechanisms for Windows and Linux operating systems.
• Ability to write technical documentation and operational procedures.
• Capability to work independently and solve complex problems.
• Fluency in Polish and communicative English (spoken and written).

Nice to have:

• Industry certifications such as CISSP, OSCP, CEH, CompTIA Security+, GIAC, etc.
• Experience in the public sector or large organizations.

• Maintain, develop, and optimize cybersecurity systems and supporting tools such as SIEM, SOAR, XDR, DAM, PIM, PAM, Proxy, DLP, WAF, and CTI.
• Conduct proactive Threat Hunting to detect threats not identified by standard detection mechanisms.
• Design cybersecurity architectures for new and existing IT systems and services.
• Select and evaluate technical solutions and security mechanisms.
• Develop and expand security requirements for systems, applications, and infrastructure.
• Collaborate with the Security Operations Center (SOC) team to analyze and handle advanced cybersecurity incidents.
• Perform in-depth technical analysis of security events and identify their causes.
• Analyze vulnerabilities, attacker techniques, and assess their impact on the protected environment.
• Develop detection mechanisms and recommend actions to enhance organizational resilience to cyber threats.
• Participate in testing, implementation, and acceptance of new cybersecurity solutions.
• Cooperate with infrastructure, network, application, architecture, and other security teams.
• Create and test security scenarios and incident response automation.
• Collaborate within Red Team and Blue Team on attack simulations and defense.
• Support project and infrastructure teams in IT security aspects.
• Monitor compliance with standards and norms such as ISO 27001, NIS2, and OWASP.

Job location: Warsaw, hybrid work.