Senior Cyber Security Specialist

Responsibilities

• Participate in security architecture improvement, provide support for the full lifecycle of security systems — from design and deployment to enhancement and technical support.
• Improve security monitoring processes and practices, participate in security events monitoring and triaging detected events. Develop and refine SIEM detection rules, investigate anomalies and identify root-cause of incidents, develop and execute mitigation plans to neutralize threats.
• Conduct technical security assessments of corporate IT systems to identify compliance deviations and vulnerabilities. Participate in risks assessments, mitigation measures design and implementation.
• Participate in improvement of security procedures, policies, and operational instructions. Collaborate with stakeholders on security processes implementation and improvement to ensure readiness for external security audits (e.g., ISO 27001, SOC2).
• Partner with internal teams to define security requirements for new systems and solutions, provide expert guidance on implementing security controls. Participate in security requests processing, security awareness trainings preparation and conduction.
• Participate in preparation of reports for management, definition and description of security strategy.

Requirements

• Practical experience performing IT systems and application security assessments and reports preparation.
• Experience in preparation of security reports, procedures and instructions for reporting. Practical knowledge of ISO 27001 technological controls implementation.

Experience

5+ years in CyberSecurity with a strong focus on SOC operations and security systems implementation.

Core Proficiency

Hands-on experience with SIEM systems (Splunk/QRadar/Logsign/Wazuh), MDM solutions (Jamf/Crowdstrike/JumpCloud/Zoho), EDR/XDR solutions (SentinelOne/ESET/Defender), Cloud security monitoring (M365, GWS, AWS), and Firewall/WAF technologies (Cisco/PaloAlto/Fortinet/Ubiquiti).

Domain Knowledge

Strong understanding of On-Premise and Cloud architectures, network security protocols, endpoint and application security. Practical experience in industry security best practices implementation (CIS, OWASP, NIST).

Language Proficiency

Intermediate (B1-B2) English level required for working with technical documentation, cross-regional communication with colleagues and partners.

Certifications

Vendor-specific security certifications (e.g., Google, MIcrosoft, Cisco, Palo Alto PCNSE, Fortinet NSE) are highly valued.

Frameworks

Practical knowledge of ISO 27001 organizational controls implementation.

Impact

Take ownership of security projects from concept to deployment.

Culture

Work in a "zero bullshit" environment that values technical excellence and autonomy.

Growth

Access to corporate English training and professional development/certification support.

Health care

medical insurance.

Beta Access

Get hands-on experience with new Ajax security systems before they reach the market.

Innovation

Help shape the future of "Made in Ukraine" reliability.