IT Security Specialist

Vasco Electronics is hiring an IT Security Specialist based in Kraków, Poland. The position involves hybrid work with three days in the office and two days remote. The company provides various contracts including Employment Contract, Mandate Contract, and B2B.

• Minimum 3 years of experience in IT security, including practical and independent configuration of security systems
• Experience designing and technically implementing IT security policies and procedures
• Advanced practical knowledge of ESET Endpoint/XDR and Microsoft 365 and/or Google Workspace security platforms
• Experience in risk management and cyber security risk assessment
• Ability to identify, analyze, and respond to anomalies and security incidents
• Ability to create technical documentation such as security policies, incident response plans, and procedures
• Ability to work independently and make decisions while collaborating with the IT team
• Ability to assess threats and best practices related to AI implementation and use
• Effective cooperation skills with other departments to balance security and operational needs
• Focus on continuous improvement of security processes
• English language proficiency at minimum B2 level

Nice to have:

• Experience with Data Loss Prevention (DLP) tools
• Knowledge of standards and regulations: ISO 27001, NIS2, GDPR/RODO
• Experience with Active Directory and Entra ID identity and access management, including conditional access policies, MFA, and permissions
• Administration and optimization of Fortinet environment (firewall, VPN, IPS/AV policies)
• Familiarity with Cisco Meraki and TPLink Omada solutions
• Basic scripting knowledge in Python, Bash, or PowerShell for security task automation
• Knowledge of current AI solutions and related security threats

• Design and implement IT security measures from concept to technical realization
• Design security policies and procedures and implement them within existing infrastructure
• Manage endpoint protection in ESET Cloud (AV/XDR), including policy configuration, detection response, and quarantine analysis
• Oversee security in Microsoft 365 and Google Workspace environments, including configuration, DLP, permission audits, and email protection
• Maintain SIEM Wazuh by configuring detection rules, integrating log sources, and tuning alerts
• Continuously monitor infrastructure, networks, and applications for anomalies and threats
• Quickly identify, analyze, and respond to security incidents and conduct remediation actions
• Identify threats and assess risks to critical IT applications and infrastructure
• Conduct regular internal audits
• Create and maintain security documentation, including policies, procedures, and risk registers
• Collaborate across departments on IT projects to ensure security compliance