Cyber Security Specialist - relocation to Warsaw

For an institution in Warsaw, we are looking for a hybrid Cybersecurity Specialist.

Candidates need to be based in the region Warsaw (50% onsite/50% offsite (max 2 hours drive)). European candidates need to relocate to Warsaw or neigbourhood.

Candidates need to be fluent in English. A work permit is required, but not provided. This position is open for contractors.

Tasks and responsibilities:

• Integrate cybersecurity solutions and ensure their sound operation;
• Maintain and upgrade the security of systems, services and/or products;
• Monitor and assure the performance of the implemented cybersecurity controls;
• Document and report on the security of systems, services and/or products;
• Implement, apply and manage patches to products to address technical vulnerabilities;
• Provide support in defining, designing, and implementing security related to IT systems;
• Assist in the support of security technologies such as user access, Internet filtering, email security, antivirus, data loss protection, document management, forensics, vulnerability assessments, collaboration technologies and mobile platforms, cloud security;
• Actively participate in information security reviews and audits;
• Implement security related changes according to ICT change management procedures;
• Design, develop, install, configure, test, monitor, maintain, troubleshoot and upgrade cyber security infrastructure;
• Provide expertise, guidance, recommendations and documented security configurations for implementation of security tools and processes;
• Identify security requirements, based upon need or translate high-level security requirements into detailed technical requirements;
• Ensure the technical design and contribute to implementation of new components and/or enhancements in coordination with other team members in particular project managers, security architects and engineers;
• Ensure service continuity for the managed components to defined SLAs;
• Investigate, diagnose and solve cybersecurity system related problems;

Profile:

• Bachelor or Master degree;
• +8 years of IT relevant professional experience;
• +5 years as Cybersecurity specialist;
• Experience in PKI operations and in deploying and managing PAM platforms;
• Experience in the operations and maintenance of security monitoring platforms (Splunk, Sentinel, Darktrace);
• Experience in operations of risk-based vulnerability management services (with Tenable) including penetration testing coordination;
• Experience in application security testing with CheckMarx SAST and DAST;
• Experience in implementation controls aligned with Zero Trust Architecture;
• Hands on experience in ICT in the role of Information Security Administrator / Specialist;
• Knowledge of systems development life cycle, security controls, offensive and defensive security practices and secure coding practices;
• Knowledge of operating systems security and computer networks security;
• Good knowledge of network protocols: SMTP, NTP, DNS, LDAP, DHCP, PKI/CA;
• Knowledge of system security vulnerabilities, threats and exploit mechanisms, penetration testing, remediation techniques and risk analysis methodologies;
• Knowledge of ISO 27000 family standards, SANS CIS critical security controls and OWASP family standards;
• Practical knowledge of designing and performing security tests;
• Practical knowledge of managing security functions within the Identity and Access Management solutions;
• Fluent in English;

Required certificates, at least 3 of the among:

GCED (GIAC Certified Enterprise Defender), GPPA (GIAC Certified Perimeter Protection Analyst), GCWN (GIAC Certified Windows Security Administrator), GCUX (GIAC Certified UNIX Security Administrator), GCCC (GIAC Certified Critical Controls), SSCP ((ISC)2 Certified Systems Security Practitioner), CCSP (ISC2 Certified Cloud Security Professional), CISSP (Certified Information Systems Security Professional), CSSLP (ISC2 Certified Secure Software Lifecycle Professional), GSEC (GIAC Certified Security Essentials), ECSA (EC-Council Certified Security Analyst), ECSA (EC-Council Certified Security Analyst) or equivalent certification recognized internationally.For an institution in Warsaw, we are looking for a Cybersecurity Risk Manager to develop and maintain the organisation's cybersecurity risk management strategy.