We are looking for an experienced and autonomous Senior Expert to strengthen our IT Service and Security Operations team. This role demands a high degree of technical insight, accountability, and process maturity. You will lead complex triage, support tool optimization, and help shape our 1st Line of Defense activities—ensuring high service reliability and proactive incident handling.
The main responsibilities for the position are:
• Provide strategic input on monitoring strategy, security event handling, and operational maturity.
• Oversee the continuous monitoring of security and/or system events and incidents.
• Analyze and respond to cybersecurity threats and vulnerabilities.
• Coordinate incident response activities and manage security breaches.
• Conduct in-depth Threat Intelligence analysis of threat data.
• Identify and mitigate potential security risks.
• Manage and maintain security tools and technologies.
• Monitor the performance and effectiveness of security systems.
• Support tool governance, platform lifecycle discussions, and risk-aligned monitoring practices.
• Automating routine tasks and streamlining workflows as Security Orchestration, Automation, and Response (SOAR) team.
• Assist in defining process improvements and maintaining regulatory or internal control alignment.
• Facilitate knowledge transfer, documentation standardization, and operational scaling efforts.
Our requirements (Fundamentals):
• Experience: Minimum of 3+ years of experience in cybersecurity or security operations with proven track record in managing security incidents and threat analysis.
• Proven experience in IT operations, monitoring platforms, or first-line security event handling.
ПодобниОбяви
• Previous involvement in platform optimization, cross-team alignment, or monitoring architecture.
• Demonstrated ability to operate across departments and influence decisions with data and logic.
• Familiarity with enterprise-grade monitoring, detection, and incident handling tools.
• Strategic communication and documentation capabilities, with a process-oriented mindset.
• Network & Security Skills: Strong knowledge understanding of networking protocols (TCP/IP) and security solutions like firewalls, IDS/IPS systems, and VPNs3.
• SIEM Expertise: configure correlation rules, build dashboards, and manage alerts
• Incident Response: techniques for identifying, isolating, and mitigating security incidents.
• Bachelor’s degree in computer science, Information Security, or a related field.
• Advanced certifications such as CISSP, CISM, or CEH is highly desirable.
• Strong analytical and troubleshooting skills across multi-domain environments.
• Autonomy, accountability, and excellent communication/documentation habits.
Advantage (Considered a Plus):
• Experience advising or leading multi-platform monitoring environments. / Web application firewalls, IPS/IDS, Antispam solutions/
• Experience with EDR and XDR solutions.
• Tool governance and risk alignment knowledge (e.g., IT controls, audit readiness).
• Familiarity with enterprise frameworks (e.g., ITIL, NIST, MITRE ATT&CK).
• Advanced certifications such as CISSP, CISM, or CEH is highly desirable.
• SANS Institute Certifications-Council’s SOC Essentials Course (S|CE), Splunk Architect, Microsoft Azure Security Engineer.
• It or security experience in financial institutions.
We offer:
• An opportunity to influence operational standards and response strategies.
• Exposure to strategic coordination and cross-team alignment.
• Growth toward technical lead or platform ownership paths.
• A collaborative and mature team culture that values initiative and precision.
