Cyber Security Specialist

Key Responsibilities:

• Security systems support and improvements: Participate in security architecture improvement, provide support for the full lifecycle of security systems — from design and deployment to enhancement and technical support.

• Security Monitoring & Incident Response: Improve security monitoring processes and practices, participate in security events monitoring and triaging detected events. Develop and refine SIEM detection rules, investigate anomalies and identify root-cause of incidents, develop and execute mitigation plans to neutralize threats.

• Conduction Security Assessments: Conduct technical security assessments of corporate IT systems to identify compliance deviations and vulnerabilities. Participate in risks assessments, mitigation measures design and implementation.

• Compliance & Governance: Participate in improvement of security procedures, policies, and operational instructions. Collaborate with stakeholders on security processes implementation and improvement to ensure readiness for external security audits (e.g., ISO 27001, SOC2).

• Consultancy & Support: Partner with internal teams to define security requirements for new systems and solutions, provide expert guidance on implementing security controls. Participate in security requests processing, security awareness trainings preparation and conduction. 

• Reporting & Strategy: Participate in preparation of reports for management, definition and description of security strategy.

Required Technical Skills & Qualifications:

• Experience: 5+ years in CyberSecurity with a strong focus on SOC operations and security systems implementation.
• Core Proficiency: Hands-on experience with SIEM systems (Splunk/QRadar/Logsign/Wazuh), MDM solutions (Jamf/Crowdstrike/JumpCloud/Zoho), EDR/XDR solutions (SentinelOne/ESET/Defender), Cloud security monitoring (M365, GWS, AWS), and Firewall/WAF technologies (Cisco/PaloAlto/Fortinet/Ubiquiti).
• Domain Knowledge: Strong understanding of On-Premise and Cloud architectures, network security protocols, endpoint and application security. Practical experience in industry security best practices implementation (CIS, OWASP, NIST).
• Security assessment: Practical experience performing IT systems and application security assessments and reports preparation.
• Security governance: Experience in preparation of security reports, procedures and instructions for reporting. Practical knowledge of ISO 27001 technological controls implementation.
• Language Proficiency: Intermediate (B1-B2) English level required for working with technical documentation, cross-regional communication with colleagues and partners.

Preferred Skills & Certifications:

• Certifications: Vendor-specific security certifications (e.g., Google, MIcrosoft, Cisco, Palo Alto PCNSE, Fortinet NSE) are highly valued.

• Frameworks: Practical knowledge of ISO 27001 organizational controls implementation.

Why Join Us:

Impact: Take ownership of security projects from concept to deployment.

Culture: Work in a "zero bullshit" environment that values technical excellence and autonomy.

Growth: Access to corporate English training and professional development/certification support.

Health care: medical insurance.

Beta Access: Get hands-on experience with new Ajax security systems before they reach the market.

Innovation: Help shape the future of "Made in Ukraine" reliability.