Database Security Analyst / Cyber Security Analyst

We are part of Hiberus, a technology company founded in Spain with a strong presence in the Polish market: 4,700+ specialists, operating in 14+ countries and delivering projects for clients worldwide. We work with technologies including AI, Data, Cloud, Software Development, BI, and Cybersecurity. A key advantage is Hiberus University — an international learning environment offering real opportunities to develop and expand skills, with more than 1,000 people trained last year.

• Experience in Cyber Security / Database Security
• Practical skills in analyzing security alerts and identifying suspicious activities
• Good knowledge of relational databases, SQL, access management, and privileged accounts
• Understanding of database security concepts
• Knowledge of Risk & Compliance and security controls
• Familiarity with regulations related to data security, particularly GDPR, DORA, PCI DSS
• English proficiency at B2/C1 level

Nice to have:

• Experience with Database Activity Monitoring (DAM) solutions, especially IBM Guardium or similar
• Knowledge of detection mechanisms and monitoring rule creation
• Practical knowledge of Python, PowerShell, REST API, or SOAR solutions
• Experience in automating security-related processes

• Analyze security alerts and identify suspicious activity in databases
• Investigate SQL logs and assess potential security risks
• Monitor user activity and privileged accounts
• Assess risks related to database security
• Support the implementation and improvement of security controls
• Assist in meeting requirements related to GDPR, DORA, and PCI DSS
• Create and develop security monitoring and detection rules
• Support automation of security monitoring and analysis processes

Please be informed that the data controller is Hiberus Poland(hereinafter "controller"). You have the right to request access to your personal data, their rectification, erasure or restriction of processing, the right to object to processing, as well as the right to data portability and to lodge a complaint to the supervisory authority. Personal data will be processed for the purpose of the recruitment process. Provision of data to the extent resulting from the Act of 26 June 1974 Labour Code is mandatory. In the remaining scope, providing data is voluntary. Refusal to provide mandatory data may result in the impossibility to carry out the recruitment process. The Administrator processes mandatory data on the basis of a legal obligation incumbent upon him/her, while with regard to additional data, the basis for processing is consent. Personal data will be processed until the recruitment procedure is completed and for the period of the possibility of asserting potential claims, and in the case of consent to participate in future recruitment procedures - until the withdrawal of such consent. Consent to the processing of personal data can be withdrawn at any time. The recipient of the data is the Just Join IT service and other entities to whom we have entrusted the processing of data in connection with recruitment.