Mid Cybersecurity Engineer - CSIRT

Brak informacji o wynagrodzeniu

MidZdalnie·WarszawaFull-time

#470866·Dodano 5 dni temu·3

Źródło: Allegro Sp. z o.o.

Aplikuj teraz

Tech Stack / Keywords

SOAREDR/XDRSIEM LinuxWindowsmacOSActive DirectoryMITRE ATT&CKDNSVPN

Podsumowanie oferty

Safeguard Allegro’s real-time marketplace by monitoring, investigating and responding to security incidents. The role covers endpoint, server, network and identity threats, using EDR/XDR, SIEM and SOAR systems.

Wymagania

Skills required:

Experience working in SOC, CERT or CSIRT teams.
Experience using SOAR, EDR/XDR and SIEM systems.
Knowledge of current offensive and defensive security threats, with a commitment to developing that knowledge.
Hands-on experience with modern, large-scale IT infrastructure and understanding of DevOps culture.
Familiarity with Linux systems (Ubuntu/Debian), Windows and macOS.
Experience designing, implementing, developing or maintaining solutions that enhance security.
Participation in handling security incidents.
Ability to communicate and collaborate effectively with people from different areas and levels of the organization.
Understanding of IT security technologies, tools and procedures and their impact on the business.
Ability to independently take an incident response process end to end, from investigation and evidence and log collection to final reporting and remediation guidance.
Interest in using automation and AI-assisted techniques to improve incident response, tune detection rules and develop defensive techniques.
Openness to developing soft skills, participating in team retrospectives and collaborating across teams.
Readiness to adopt and secure AI technologies and incorporate AI coding and security assistants into daily work.
Interest in continually developing and updating knowledge of the changing threat landscape.
English at least at B2 level.

Obowiązki

Your main responsibilities:

Monitor and triage security incidents generated by EDR/XDR, SIEM and other detection platforms to identify true positive incidents in real time.
Investigate and respond to endpoint and server threats, including malicious behavior on corporate workstations and servers.
Analyze and mitigate phishing campaigns targeting Allegro brands by identifying malicious domains impersonating the company, coordinating takedown requests and enriching related IOCs.
Detect and respond to network-layer attacks, including DDoS attempts, password spraying and abnormal BOT scanning.
Perform digital forensics and log correlation across multiple data sources, including Active Directory sign-ins and endpoint, server, proxy, DNS, VPN and DHCP logs, to reconstruct attack timelines and root cause.
Enrich and correlate Indicators of Compromise using threat intelligence platforms and internal asset inventories to assess scope and impact.
Investigate identity-related risks, such as suspected account takeovers, impersonation and anomalous user behavior flagged by identity protection tools.
Document findings and produce evidence-based incident reports, including root cause analysis, MITRE ATT&CK mapping and remediation recommendations.
Coordinate remediation actions with IT, infrastructure and business teams, such as account lockouts, endpoint isolation, credential resets and domain blocking.
Improve detection capabilities by tuning correlation rules, updating threat intelligence and identifying gaps based on recurring incident patterns.
Collaborate with brand protection and external partners to detect and respond to threats against Allegro's reputation and customers.

Benefity

Offices with equipped kitchens, bicycle parking and terraces.
A MacBook Pro or Dell computer with Windows, with accessories.
A cafeteria plan with a selection of benefits, including medical, sports or lunch packages, insurance and purchase vouchers.
Employer-paid English classes related to the nature of the job.
A training budget, inter-team tourism, hackathons and an internal learning platform with training courses.
An additional day off for volunteering.
Social events for Allegro employees.

Elastyczne godziny

Premie

Parking dla rowerów

Karta sportowa

Opieka zdrowotna

Ubezpieczenie

Kursy językowe

Dofinansowanie szkoleń

Spotkania integracyjne

Płatny urlop

Inne informacje

Participate in a 24/7 on-call rotation.
Working hours start between 7:00 a.m. and 9:00 a.m.

Allegro

123 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz