Cybersecurity

About the role

Monitor, analyze, and respond to security incidents across applications, Linux servers, and cloud infrastructure. Design and implement security controls using Secure-by-Design / Security-by-Default principles. Collaborate with developers to review application architecture, configurations, and security-relevant code. Support and participate in penetration testing (web, API, infrastructure), including validation of findings and remediation. Perform basic threat modeling and risk assessment for new and existing systems. Improve security logging, monitoring, and alerting using SIEM and endpoint security tools. Participate in incident response, root cause analysis, and post-incident reviews. Maintain practical security guidelines and best practices for engineering teams.

Key responsibilities

• Monitor, analyze, and respond to security incidents across applications, Linux servers, and cloud infrastructure

• Design and implement security controls using Secure-by-Design / Security-by-Default principles

• Collaborate with developers to review application architecture, configurations, and security-relevant code

• Support and participate in penetration testing (web, API, infrastructure), including validation of findings and remediation

• Perform basic threat modeling and risk assessment for new and existing systems

• Improve security logging, monitoring, and alerting using SIEM and endpoint security tools

• Participate in incident response, root cause analysis, and post-incident reviews

• Maintain practical security guidelines and best practices for engineering teams

About you

• Min. 5 years experience in Cybersecurity

• Hands-on Linux experience (daily usage, basic processes, permissions, networking, and log analysis)

• Ability to read and understand application code for security analysis (Python, Java, JavaScript, or similar)

• Experience supporting or conducting penetration testing or vulnerability validation (not limited to scanning only)

• Understanding of web & API security fundamentals (OWASP Top 10)

• Exposure to applying Secure-by-Design principles within SDLC

• Understanding of attacker techniques and common attack paths

• Experience analyzing vulnerabilities and distinguishing false positives vs real risks

• Basic experience securing AWS resources (IAM usage, EC2/Linux hardening basics, logging)

• Understanding of SIEM concepts (log sources, alerting, basic correlation)

• Basic knowledge of EDR/XDR and endpoint incident response concepts