Gcore

Security Engineer (IT Security)

Brak informacji o wynagrodzeniu

SeniorZdalnieFull-time

#469671·Dodano 7 dni temu·1

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

Python SIEMIntuneNetworkingISOIECVANTA

Podsumowanie oferty

As a Security Engineer in the Information Security team, you’ll operate and automate security tooling to protect the company’s network, systems, and applications. You’ll work across security operations, endpoint and access security, awareness, and compliance using Microsoft Defender XDR, Entra ID, Wazuh SIEM, Intune, and Kandji.

Wymagania

Experience in security operations or security engineering.
Hands-on experience with the Microsoft security stack (Defender XDR, Entra ID, Intune, Exchange Online) and a SIEM.
Solid understanding of networking and of Windows, macOS, and Linux administration.
Familiarity with ISO/IEC 27001, SOC 2, and other security compliance frameworks.
Scripting skills for automation (PowerShell, Python, or Bash).
Ability to explain security topics to non-technical audiences; fluent English.

Nice to have:

Experience with Vanta or a similar compliance automation platform.
Relevant certifications (e.g., Microsoft SC-200, CompTIA Security+ / CySA+) are a strong advantage.

Obowiązki

Security Operations and Incident Response:

Operate and automate security tooling (Microsoft Defender XDR, Entra ID, Wazuh SIEM) to protect the company's network, systems, and applications.
Monitor and triage security events, investigate incidents, propose measures to prevent recurrence, and prepare incident reports.
Handle user-reported phishing and maintain email protection controls.
Plan and implement network security measures and define security requirements for operating systems, networks, and services.

Endpoint and Access Security:

Manage device security and compliance through MDM (Intune, Kandji) and track remediation of endpoint vulnerabilities.
Ensure access is granted based on business need; run periodic access reviews and clean up groups and permissions.

Security Awareness:

Run the company-wide security awareness program, including training materials on current threats, phishing simulations with results reports, and security communications to employees.

Governance and Compliance:

Control compliance with corporate security standards and maintain related policies and procedures.
Support internal and external audits (ISO/IEC 27001, SOC 2, BSI C5, PCI DSS), including evidence collection in Vanta and remediation of findings.
Review the security of new third-party software, SaaS, and AI tools together with Legal.

Benefity

Flexible working hours.
Work from anywhere in the world for up to 45 days per year.
Private medical insurance for you and your family.
Extra paid vacation and sick leave days.
Language courses.
Snacks, drinks, and entertainment in the offices.
Team sports and social activities.

Elastyczne godziny

Opieka zdrowotna

Płatny urlop

Kursy językowe

Spotkania integracyjne

Napoje w biurze

Darmowe przekąski

Gcore

7 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz