Information Security specialist

We are looking for a Technical Information Security Specialist. The main responsibilities of this role include providing technical support during security audits, assessing the security of systems, and operating and enhancing a SIEM solution based on the Elastic Stack.

Responsibilities

• Technical support for internal and external information security audits.
• Collection, analysis, and preparation of technical evidence for audits and compliance assessments.
• Verification of system configurations for compliance with information security requirements and internal policies.
• Participation in the review and approval of infrastructure changes, system integrations, architectural solutions, and access control configurations.
• Conducting technical risk assessments during the implementation of new systems and services.
• Administration and continuous improvement of Elastic SIEM (ELK).
• Development and optimization of detection rules, alerts, and Kibana dashboards.
• Monitoring, investigation, and analysis of information security events and incidents.
• Collaboration with IT teams, software developers, and information system owners.

Requirements

• 2+ years of experience in Information Security, SIEM, or SOC.
• Hands-on experience with Elastic Stack / Elastic SIEM.
• Understanding of log collection, processing, and normalization principles.
• Experience working with authentication and access management logs.
• Understanding of IAM and IdP concepts, including SSO and MFA.
• Knowledge of Linux and Windows administration and security.
• Experience analyzing information system configurations and identifying technical security risks.
• Basic knowledge of SQL.
• Solid understanding of PostgreSQL and MySQL architecture, administration, logging, and security.
• Practical knowledge of information security standards, methodologies, and best practices.
• Experience with Jira and Confluence.

• Ability to document technical findings and provide clear, actionable recommendations.

  Nice to have:

• Experience applying AI in the field of Information Security.
• Experience with Okta, Google Workspace, and Google Cloud Platform (GCP).
• Knowledge of AWS security services and security mechanisms.
• Experience with SOAR platforms and solutions.
• Automation skills using Python or Bash.
• Familiarity with Information Security standards and methodologies.
• Experience developing detection rules and incident response playbooks.

• Competitive remuneration.
• 5/2 work schedule.
• Remote work work.
• Flexiable start of working days.