КипрКомпания не указана
Cybersecurity Specialist / Security Engineer
вчера
6000–8000 EURКипрMiddle
zero trustztnatcp/ipdnshttp/httpstlsvpnnat
We are looking for an experienced Cybersecurity Specialist / Security Engineer to secure and continuously improve the company’s server, network, cloud, and application infrastructure with a focus on Zero Trust architecture and Network Access (ZTNA).
About the product
- Focus on securing and continuously improving server, network, cloud, and application infrastructure.
Responsibilities
- Ensure the security of the company’s server, network, and cloud infrastructure.
- Monitor and analyze information security events to detect attacks, scanning activity, anomalies, and unauthorized access attempts.
- Respond to security incidents, including investigation, containment, remediation, root cause analysis, and documentation.
- Conduct regular infrastructure security audits and manage vulnerabilities.
- Harden Linux and Windows servers, operating systems, and network services.
- Configure and maintain Firewalls, WAF, IDS/IPS, VPN, and DDoS protection solutions.
- Ensure the security of Web applications and APIs.
- Manage and control access to production infrastructure and critical systems.
- Develop and maintain security policies, procedures, and Incident Response Playbooks.
- Collaborate with DevOps engineers, system administrators, DBAs, and developers to identify and mitigate security risks.
- Design, implement, and continuously improve the company’s security architecture and technical controls.
- Designing and implementing Zero Trust security architecture.
- Implementing ZTNA for employees’ and administrators’ access to internal infrastructure.
- Replacing network/IP-based trust with identity-based access controls.
- Implementing Device Trust and Device Posture checks.
- Configuring MFA and Conditional Access policies.
- Enforcing Least Privilege Access.
- Implementing microsegmentation.
- Providing short-lived access and temporary privileged access.
- Monitoring and auditing administrative sessions.
- Integrating Zero Trust solutions with IAM, SSO, and Identity Providers (IdPs).
- Building secure access mechanisms for Linux and Windows servers, databases, internal Web services, and administrative panels.
Requirements
- 3+ years of hands-on experience in Cybersecurity / Information Security.
- Strong understanding of TCP/IP, DNS, HTTP/HTTPS, TLS, VPN, NAT, and network routing.
- Solid Linux administration skills.
- Practical experience configuring Firewalls, WAF, ACLs, and network segmentation.
- Hands-on experience with Cloudflare or equivalent WAF/CDN/DDoS protection solutions.
- Good understanding of the OWASP Top 10 and common Web/API attack vectors.
- Practical experience with Vulnerability Management tools such as Nessus, OpenVAS, Qualys, or equivalents.
- Knowledge of CVE/CVSS and the ability to assess the actual business and technical risks associated with identified vulnerabilities.
- Experience with SIEM, IDS/IPS, and centralized log collection.
- Ability to analyze system, network, application, and web server logs.
- Experience investigating security incidents and working with Indicators of Compromise (IOCs).
- Understanding of RBAC, MFA, PAM, the Principle of Least Privilege, and privileged access management.
- Experience with Docker and an understanding of container security principles.
- Understanding of SAST, DAST, dependency scanning, and secret scanning.
- Ability to automate security tasks using Bash and/or Python.
- Practical experience implementing Zero Trust Network Access (ZTNA) solutions and a solid understanding of Zero Trust architecture are essential.