We are looking for a Technical Information Security Specialist. The main responsibilities of this role include providing technical support during security audits, assessing the security of systems, and operating and enhancing a SIEM solution based on the Elastic Stack.
Responsibilities
- Technical support for internal and external information security audits.
- Collection, analysis, and preparation of technical evidence for audits and compliance assessments.
- Verification of system configurations for compliance with information security requirements and internal policies.
- Participation in the review and approval of infrastructure changes, system integrations, architectural solutions, and access control configurations.
- Conducting technical risk assessments during the implementation of new systems and services.
- Administration and continuous improvement of Elastic SIEM (ELK).
- Development and optimization of detection rules, alerts, and Kibana dashboards.
- Monitoring, investigation, and analysis of information security events and incidents.
- Collaboration with IT teams, software developers, and information system owners.
Requirements
- 2+ years of experience in Information Security, SIEM, or SOC.
- Hands-on experience with Elastic Stack / Elastic SIEM.
- Understanding of log collection, processing, and normalization principles.
- Experience working with authentication and access management logs.
- Understanding of IAM and IdP concepts, including SSO and MFA.
- Knowledge of Linux and Windows administration and security.
- Experience analyzing information system configurations and identifying technical security risks.
- Solid understanding of PostgreSQL and MySQL architecture, administration, logging, and security.
- Practical knowledge of information security standards, methodologies, and best practices.
- Experience with Jira and Confluence.
- Ability to document technical findings and provide clear, actionable recommendations. Nice to have:
- Experience applying AI in the field of Information Security.
- Experience with Okta, Google Workspace, and Google Cloud Platform (GCP).
- Knowledge of AWS security services and security mechanisms.
- Experience with SOAR platforms and solutions.
- Automation skills using Python or Bash.
- Familiarity with Information Security standards and methodologies.
- Experience developing detection rules and incident response playbooks.
We offer
- Competitive remuneration.
- Flexiable start of working days.
