We are looking for a technical Information Security Engineer to join our team. In this role, you will provide technical support for information security audits, assess the security of systems, and operate and develop our SIEM based on the Elastic Stack (ELK).
This is an opportunity to work with the modern and in-demand Elastic Stack and to develop expertise in a rapidly growing field, including the security of AI/LLM solutions.
Responsibilities
- Provide technical support for internal and external information security audits.
- Collect, analyze, and prepare technical evidence for audits and assessments.
- Review system configurations for compliance with information security requirements and internal policies.
- Participate in the review and approval of infrastructure changes, integrations, architectural solutions, and access configurations.
- Conduct technical risk assessments when implementing new systems and services.
- Operate and develop the Elastic SIEM (ELK).
- Develop and improve detection rules, alerts, and Kibana dashboards.
- Monitor and investigate information security events and incidents.
- Collaborate with IT, development teams, and information system owners.
Requirements
- 2+ years of experience in information security, SIEM, or SOC.
- Hands-on experience with Elastic Stack / Elastic SIEM (Elasticsearch, Logstash, Kibana).
- Understanding of log collection, processing, and normalization principles.
- Knowledge of Linux and Windows administration and security.
- Experience analyzing information system configurations and identifying technical risks.
- Basic knowledge of SQL.
- Practical understanding of information security standards, methodologies, and best practices.
- Ability to document technical findings and formulate clear, actionable recommendations.
Nice to Have
- Strong understanding of PostgreSQL and MySQL architecture, administration, logging, and security.
- Understanding of IAM and IdP principles, including SSO and MFA.
- Experience working with authentication and access management logs.
- Experience with AI security.
- Experience with Okta, Google Workspace, and GCP.
- Knowledge of AWS security services and mechanisms.
- Experience with SOAR solutions.
- Automation skills using Python or Bash.
- Experience developing detection rules and response scenarios.
We offer - Competitive remuneration.
- 5/2 work schedule.
- Remote work work.
- Flexiable start of working days.
