Cybersecurity Specialist / Security Engineer

Описание вакансии

#vacancy#Cybersecurity Specialist / Security Engineer, #Cyprus office, 6-8k euros net. Fintech

About the Role

We are looking for an experienced Cybersecurity Specialist / Security Engineer to secure and continuously improve the company’s server, network, cloud, and application infrastructure.

The ideal candidate combines strong hands-on technical expertise with the ability to independently investigate security incidents, assess risks, design secure architectures, and implement effective security controls. A key requirement is practical experience with Zero Trust architecture and Zero Trust Network Access (ZTNA), including secure identity-based access to internal infrastructure and critical systems.

Key Responsibilities

• Ensure the security of the company’s server, network, and cloud infrastructure.

• Monitor and analyze information security events to detect attacks, scanning activity, anomalies, and unauthorized access attempts.

• Respond to security incidents, including investigation, containment, remediation, root cause analysis, and documentation.

• Conduct regular infrastructure security audits and manage vulnerabilities.

• Harden Linux and Windows servers, operating systems, and network services.

• Configure and maintain Firewalls, WAF, IDS/IPS, VPN, and DDoS protection solutions.

• Ensure the security of Web applications and APIs.

• Manage and control access to production infrastructure and critical systems.

• Develop and maintain security policies, procedures, and Incident Response Playbooks.

• Collaborate with DevOps engineers, system administrators, DBAs, and developers to identify and mitigate security risks.

• Design, implement, and continuously improve the company’s security architecture and technical controls.

Required Qualifications (Must-Have)

• 3+ years of hands-on experience in Cybersecurity / Information Security.

• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, TLS, VPN, NAT, and network routing.

• Solid Linux administration skills.

• Practical experience configuring Firewalls, WAF, ACLs, and network segmentation.

• Hands-on experience with Cloudflare or equivalent WAF/CDN/DDoS protection solutions.

• Good understanding of the OWASP Top 10 and common Web/API attack vectors.

• Practical experience with Vulnerability Management tools such as Nessus, OpenVAS, Qualys, or equivalents.

• Knowledge of CVE/CVSS and the ability to assess the actual business and technical risks associated with identified vulnerabilities.

• Experience with SIEM, IDS/IPS, and centralized log collection.

• Ability to analyze system, network, application, and web server logs.

• Experience investigating security incidents and working with Indicators of Compromise (IOCs).

• Understanding of RBAC, MFA, PAM, the Principle of Least Privilege, and privileged access management.

• Experience with Docker and an understanding of container security principles.

• Understanding of SAST, DAST, dependency scanning, and secret scanning.

• Ability to automate security tasks using Bash and/or Python.

Zero Trust — Mandatory Requirements

Practical experience implementing Zero Trust Network Access (ZTNA) solutions and a solid understanding of Zero Trust architecture are essential for this role.

The candidate should be able to design, implement, and maintain a Zero Trust approach, including:

• Designing and implementing Zero Trust security architecture.

• Implementing ZTNA for employees’ and administrators’ access to internal infrastructure.

• Replacing network/IP-based trust with identity-based access controls.

• Implementing Device Trust and Device Posture checks.

• Configuring MFA and Conditional Access policies.

• Enforcing Least Privilege Access.

• Implementing microsegmentation.

• Providing short-lived access and temporary privileged access.

• Monitoring and auditing administrative sessions.

• Integrating Zero Trust solutions with IAM, SSO, and Identity Providers (IdPs).

• Building secure access mechanisms for Linux and Windows servers, databases, internal Web services, and administrative panels.