2. CYBERSECURITY AND SOC OPERATIONS SPECIALIST

Based on Article 37 of the Law on Institutions („Narodne novine“, no. 76/93., 29/97., 47/99., 35/08., 127/19. and 151/22.), Articles 7 of the Decision on the establishment of the Institute for Informatics and Digitalization of Koprivnica-Križevci County („Službeni glasnik Koprivničko-križevačke županije“, no. 14/26.), Article 14 of the Statute of the Institute for Informatics and Digitalization of Koprivnica-Križevci County („Službeni glasnik Koprivničko-križevačke županije“, no. 15/26.) and Article 7 of the Rules of Procedure of the Institute for Informatics and Digitalization of Koprivnica-Križevci County from August 20, 2026, the Director of the Institute for Informatics and Digitalization of Koprivnica-Križevci County, with headquarters in Koprivnica, Trg bana Josipa Jelačića 15, OIB: 20908625622 (hereinafter: the Institute), announces a PUBLIC COMPETITION for the Institute for Informatics and Digitalization of Koprivnica-Križevci County for employment in the following positions:

2. CYBERSECURITY AND SOC OPERATIONS SPECIALIST - one executor, for an indefinite period, with a mandatory probationary period of six months:

2.1. JOB DESCRIPTION:

• independently performs the most complex professional and operational tasks in the field of cybersecurity and information security,
• monitors, analyzes, and correlates security events and alarms within SOC activities and performs advanced analysis of detected threats,
• identifies, analyzes, classifies, and assesses cyber threats and security incidents and determines action priorities,
• coordinates and implements technical activities for responding to security incidents, limiting their consequences, removing causes, and system recovery,
• performs advanced analysis of security logs, network traffic, and other technical data to determine the cause and scope of security incidents,
• performs and coordinates vulnerability management procedures, including identification, assessment, prioritization, and monitoring of the remediation of identified vulnerabilities,
• plans and implements security testing of information systems, including penetration testing and other forms of technical security verification,
• participates in conducting risk assessments and security analyses of the information systems of the Institute and its users,
• implements, configures, maintains, and improves security tools and systems for monitoring and protection (SIEM, EDR/XDR, IDS/IPS, and other security platforms),
• participates in the implementation and application of security standards, frameworks, policies, and technical protection measures,
• prepares security reports, professional analyses, recommendations, procedures, and technical documentation,
• provides professional support to other employees of the Institute and users in resolving complex information and cybersecurity issues,
• participates in the preparation of professional content and recommendations for raising user awareness regarding cybersecurity,
• cooperates with competent authorities, service providers, and other organizations in the field of cybersecurity,
• monitors the development of cyber threats, security technologies, standards, and regulatory frameworks and proposes measures for security improvement,
• provides professional support and transfers knowledge to the Cybersecurity and SOC Operations Analyst, and
• performs other tasks in accordance with the employment contract.

2.2. JOB REQUIREMENTS:

• completed university graduate study, professional graduate study, or university integrated undergraduate and graduate study in the field of computing, electrical engineering, information and communication sciences, informatics, or mathematics, at a level where a total of at least 300 ECTS credits are obtained,
• at least three (3) years of work experience in information or cybersecurity positions,
• no criminal record,
• Category B driver's license, and
• knowledge of the English language in speech and writing

2.3. ADDITIONAL KNOWLEDGE, EXPERIENCE, AND COMPETENCIES THAT REPRESENT AN ADVANTAGE IN THE SELECTION OF CANDIDATES:

• experience working in a SOC environment or in incident management positions,
• experience working with SIEM, EDR, XDR, IDS/IPS, or other security platforms,
• knowledge of security frameworks and standards (ISO 27001, NIST CSF, CIS Controls, NIS2, etc.),
• experience in network traffic analysis, forensic analysis, and vulnerability management,
• possession of certificates in the field of cybersecurity (CompTIA Security+, CySA+, CEH, GIAC, CISSP, or similar),
• knowledge of Windows and Linux system administration and network technologies, and
• knowledge and application of generative artificial intelligence in a business environment.

Words and terms that have gender meaning, used in this public competition, refer equally to both male and female genders regardless of whether they are used in the masculine or feminine gender. Persons of both sexes may apply for the public competition equally. The written application for the public competition must include the candidate's personal data (first name, personal identification number, residential address, telephone or mobile number, email address), the number and name of the position for which they are applying, and the candidate's signature. Candidates are obliged to attach the following evidence of meeting the required conditions for the job position with the application for the public competition:

• curriculum vitae
• for positions numbered 1., 2., 3., and 5., a copy of the diploma proving the completion of a specific study and the acquisition of the right to an academic or professional title or academic degree,
• for position number 4., a copy of the certificate of the final thesis,
• for position number 6., a copy of the certificate of the final thesis, confirmation of passed state matriculation exams, or the state matriculation certificate,
• a certificate from a competent court or the e-Građani system stating that there is no criminal record, not older than eight days from the date of publication of the public competition,
• an electronic record of employment status (e-Radna knjižica) or a copy of the confirmation of the employment status of the insured person from the Croatian Pension Insurance Institute,
• for positions numbered 1., 2., 4., 5., and 6., copies of evidence of work experience required to perform the job duties (employment contracts, employer confirmations, decisions on appointment, assignment, or promotion, based on which the type of work, the period of performance, and the profession required for performance can be determined),
• a copy of a Category B driver's license,
• a copy of evidence of knowledge of the English language,
• a copy of documents proving the possession of additional knowledge, experience, and competencies that represent an advantage in the selection of candidates.

If a candidate attaches documents in which personal data are not identical, they are obliged to provide proof of their change (a copy of a marriage or gender certificate). Documents sent to the public competition will not be returned. The Director of the Institute will, at the latest before concluding the employment contract, call the selected candidates to submit the originals of the copies they attached to their application for inspection within an appropriate timeframe, with a warning that failure to provide the requested documents will be considered a withdrawal from appointment. The public competition will be published on the Institute's website: www.zid.hr and through the competent employment service. The deadline for submitting applications to the public competition is eight days from the date of publication of the public competition by the competent employment service. Applications to the public competition are submitted in digital form to the email: info@zid-kckzz.hr or in paper form to the address: „Koprivničko-križevačka županija, Upravni odjel za poslove Županijske skupštine i pravne poslove, Ulica Antuna Nemčića 5, 48000 Koprivnica“ with the mandatory notation: „Natječaj za radno mjesto u Zavodu za informatiku i digitalizaciju - ne otvarati“. A regular application is considered an application that contains all the data and attachments specified in the public competition. Incomplete, late, and unsigned applications to the public competition will not be considered. A person who has not submitted a timely, regular, and signed application or does not meet the formal requirements of the public competition is not considered a candidate applied for the public competition, of which the Director of the Institute will provide written notice. The Director of the Institute will appoint a commission to conduct this public competition (hereinafter: the Commission for the Implementation of the Public Competition). The selection of candidates will be carried out based on candidate applications and interviews conducted by the Commission for the Implementation of the Public Competition, and if more than one candidate applies for a certain position, a decision may be made to conduct a written test of knowledge and abilities lasting up to 45 minutes. The Commission for the Implementation of the Public Competition will not interview candidates for positions for which a written test of knowledge and abilities is being conducted if they do not achieve at least 50% of the points on the written test of knowledge and abilities. All candidates who meet the formal requirements of the public competition will be notified by email of the date, time, and place of the written test of knowledge and abilities or the interview, at least five (5) days before their conduct. Only candidates who meet the formal requirements of the public competition may access the previous test of knowledge and abilities or the interview. Upon arrival at the test of knowledge and abilities or the interview, candidates will be asked to present an appropriate identification document to verify their identity. Candidates who cannot prove their identity will not be able to access the test of knowledge and abilities or the interview. A candidate who does not attend the test of knowledge and abilities or the interview will be considered to have withdrawn their application for the public competition. After verifying the identity of the candidates, an interview will be conducted, or if a written test of knowledge and abilities is being conducted, the tests will be distributed, which candidates can solve for up to 45 minutes, and after that, an interview will be conducted with candidates who achieved at least 50% of the points on the test. Candidates are obliged to adhere to the established time and schedule of the procedure. During the test of knowledge and abilities or the interview, it is not permitted to:

• use any literature or notes,
• use a mobile phone or other communication tools,
• leave the room in which the test of knowledge and abilities or the interview is taking place, and
• talk to other candidates or otherwise disturb the concentration of candidates.

Candidates who behave inappropriately or violate one of the previously mentioned rules will be removed from the testing or interview, and their result and work will not be scored by the Commission for the Implementation of the Public Competition. The Commission for the Implementation of the Public Competition will compile a report on the conducted public competition procedure and determine the ranking list of candidates and submit it to the Director of the Institute for the purpose of concluding employment contracts with the selected candidates. The Institute for Informatics and Digitalization of Koprivnica-Križevci County, as the controller of the personal data collection, processes the submitted candidate data in accordance with the provisions of positive regulations governing the protection of personal data. The submitted data will be processed for the purpose of conducting the public competition and will not be used for other purposes. If a candidate does not wish to give consent for the collection and processing of their personal data for participation in this public competition, they must clearly and unequivocally state this in their application for the public competition. The Institute reserves the right to, at any time, without explanation, cancel the public competition in whole or in part and not to accept any submitted application for the public competition. The Director of the Institute will inform the candidates of the result of this public competition within 45 days from the date of expiration of the deadline for submitting applications to the public competition.