Shimi Sp. z o.o.

Discussion

Cybersecurity Administrator (m/f/n)

We are looking for a Cybersecuristy Administrator (m/f/n) to join our client's team, carrying out a project for one of the EU institutions in Warsaw.

About the project:

As a Cybersecurity Administrator/Specialist you will privide ongoing engineering and cybersecurity administartorion support. This role will ensure that existing systems remain up-to-date and operational while also supporting the implementation of new platforms and/or expansion of the current platforms' capabilities.

Requirements:

  • A minimum of 8 years of professional experience in IT

  • A minimum of 5 years project experience relevant to the profile or at a similar position (Security Administrator/Specialist)

  • Higher degree diploma (bachelor or engineer)

  • English B2 level

  • Knowledge of systems development life cycle, operating systems security and computer networks security

  • Knowledge of security controls, offensive and defensive security and secure coding practices

  • Knowledge of system security vulnerabilities, threats and exploit mechanisms, penetration testing, remediation techniques and risk analysis methodologies

  • Knowledge of ISO 27000 family standards and SANS CIS critical security controls

  • Knowledge of OWASP family standards

  • Good knowledge of network protocols: SMTP, NTP, DNS, LDAP, DHCP, PKI/CA

  • Practical knowledge of designing and performing security tests

  • Practical knowledge of managing security functions within the Identity and Access Management solutions

Specific requirements:

  • Experience in systems deployment and integrations

  • Knowledge of Tiering model

  • Experience in maintenance, support and administration of systems

  • Experience in IR tools (XDR, SIEM, NDR)

  • Proficient in writing PoC/TDD documentation

  • Experience in reviewing current security controls and proposing improvements

  • Experience in writing security procedures/policies with emphasise on information protection and data privacy

Required certificates (at least 3 among or any equivalent recognised internationally):

  • GCED (GIAC Certified Enterprise Defender) or equivalent.

  • GPPA (GIAC Certified Perimeter Protection Analyst) or equivalent.

  • GCCWN (GIAC Certified Windows Security Administrator) or equivalent.

  • GCUX (GIAC Certified UNIX Security Administrator) or equivalent.

  • GCCC (GIAC Certified Critical Controls) or equivalent.

  • SSCP (ISC)2 Certified Systems Security Practitioner) or equivalent.

  • CCSP (ISC2 Certified Cloud Security Professional) or equivalent.

  • CISSP (Certified Information Systems Security Professional) or equivalent.

  • CSSLP (ISC2 Certified Secure Software Lifecycle Professional) or equivalent.

  • GSEC (GIAC Certified Security Essentials) or equivalent.

  • ECSA (EC-Council Certified Security Analyst) or equivalent.

  • SCPO (SABSA Certified Security Operations & Service Management Practitioner) or equivalent.

  • ECSA (EC-Council Certified Security Analyst) or equivalent.

Typical tasks and responsibilities:

  • Provide cybersecurity related support to users and/or customers

  • Integrate cybersecurity solutions and ensure their sound operation

  • Securely configure systems, services and/or products

  • Maintain and upgrade the security of systems, services and/or products

  • Implement cybersecurity procedures and controls

  • Monitor and assure the performance of the implemented cybersecurity controls

  • Document and report on the security of systems, services and/or products

  • Implement, apply and manage patches to products to address technical vulnerabilities

  • Provides support in defining, designing, and implementing security related to IT systems

  • Assists in the support of security technologies such as user access, Internet filtering, email security, antivirus, data loss protection, document management, forensics, vulnerability assessments, collaboration technologies and mobile platforms, cloud security

  • Actively participates in information security reviews and audits

  • Updates the technical documentation and operating procedures

  • Monitors security systems, responds to events and alerts

  • Recommends & evaluates security tools to identify improvements in security measures

  • Implements security related changes according to ICT change management procedures

  • Design, develop, install, configure, test, monitor, maintain, troubleshoot and upgrade cyber security infrastructure

  • Provide expertise, guidance, recommendations and documented security configurations for implementation of security tools and processes

  • Evaluate and recommend secure configurations

  • Identify security requirements, based upon need or translate high-level security requirements into detailed technical requirements

  • Support various technical and non-technical stakeholders to specify and negotiate security requirements

  • Interact with network and system engineering teams to effectively communicate and develop security solutions

  • Drafts documentation and standard operational procedures to support security systems operations

  • Ensures the technical design and contributes to implementation of new components and/or enhancements in coordination with other team members in particular project managers, security architects and engineers.

  • Ensure service continuity for the managed components to defined SLAs.

  • Investigate, diagnose and solve cybersecurity system related problems

  • Diagnose and solve problems and faults occurring in the operation of cyber security components

  • Document cyber defence components configurations

Offer:

  • Rate: 470-520 EUR/MD net (pure B2B, without paid holidays)

  • B2B contract signed with SHIMI

  • Long-term cooperation (minimum 4 years)

  • Work model: 60% remote, 40% from the office in Warsaw

  • Benefits: Co-financing of private medical and sports packages

  • Work in a multinational environment

  • The candidate must be an EU citizen and must be working from Poland

Show