IT Security Specialist

About the company

For the IT Security department in one of our companies, we are looking for a person who will support security incident handling, event analysis, and the development of the SOC environment. In this position, you will work with Microsoft 365 Security solutions, SIEM/SOAR systems, and vulnerability management tools.

We are looking for people throughout Poland.

If you have experience in the field of IT security - we invite you to apply! We are #theGoodPeople!

Your tasks

• IT security incident handling, including logging, monitoring, diagnosing, resolving, and escalating tickets.
• Resolving IT security incidents based on your own knowledge, available tools, knowledge bases, and operational materials.
• Administration and management of IT security tools, including SIEM/SOAR class systems and Microsoft 365 Security solutions.
• Creating and optimizing correlation rules, as well as automation and orchestration of cybersecurity activities.
• Handling Vulnerability Management tools and proactive infrastructure scanning for known vulnerabilities.
• Handling and resolving customer tickets in the field of IT security.
• Preparing recommendations based on security incident analysis and RCA analyses.
• Continuous development and improvement of tools used in the cybersecurity area, using automation, orchestration, and artificial intelligence elements.
• Cooperation with teams responsible for IT infrastructure administration and with customers.
• Participation in IT security projects indicated by the supervisor.
• Preparing and updating instructions, manuals, procedures, and response scenarios for SOC teams.
• Preparing technical documentation and training for other employees according to the supervisor's instructions.
• Monitoring and maintaining quality KPI indicators.
• Support in preparing periodic reports for customers and billing reports.
• Documenting performed work and reporting completed tasks.
• Reporting working time in tools indicated by the supervisor.
• Supporting sales activities in the field of IT security.
• Applying and complying with applicable procedures, regulations, and requirements resulting from customer agreements.
• Increasing qualifications in the field of IT security systems and solutions used by the team and customers.

Requirements

• Possession of the Microsoft SC-200 certificate.
• Minimum 2 years of experience in a position related to cybersecurity, SOC, IT infrastructure security, or security systems administration.
• Knowledge of English at a level that allows working with technical documentation (minimum B2).
• Practical knowledge of IT security tools, including SIEM/SOAR class solutions, Vulnerability Management, and Microsoft 365 Security.
• Very good knowledge of IT system architecture, including the network layer, Windows/Linux operating systems, and application security fundamentals.
• Knowledge of IT security incident handling processes, escalation, action documentation, and working with ticketing systems.
• Knowledge of attack techniques and their classification using the MITRE ATT&CK Framework.
• Ability to analyze logs, build logical queries, and create simple scripts supporting analysis and automation of activities.
• Ability to prepare technical documentation, procedures, instructions, and reports.
• Ability to work under time pressure, prioritize tasks correctly, and make decisions in situations requiring a quick response.
• Independence, responsibility, and diligence in performing assigned tasks.
• Communication skills and the ability to cooperate with technical teams, customers, and supervisors.
• Readiness for continuous development, participation in training, and obtaining industry certificates.

• Advanced knowledge of Microsoft 365 Security and SIEM/SOAR solutions such as Microsoft Sentinel, Vision One, or Splunk.
• Knowledge of the operation of security systems such as AV, EDR, IDS/IPS, WAF, firewall, and other protective solutions.
• Experience in vulnerability management and handling Sandbox type tools.
• Certificates in the field of systems, cloud solutions, and IT security, particularly Microsoft SC-100, SC-300, or SC-401.

Must have: Security, Windows, Linux, MITRE ATT&CK Framework, Vulnerability Management, SoC

Nice to have: Splunk, Microsoft Sentinel, Vision One, AV, EDR

What we offer

What we offer

• Employment based on an employment contract.
• Hybrid work – 3 days from the office and 2 days remotely.
• Participation in interesting projects implemented using modern technologies.
• A system of technical and language training.
• The possibility of obtaining industry certificates.
• A benefits package, including private medical care and a MultiSport card.

Benefits

• private medical care
• life insurance
• sports cards (Multi Sport, Medicover Sport)