Security Engineer
Description
BrainRocket is a global company creating end-to-end tech products for clients across Fintech, iGaming, and Marketing. Young, ambitious, and unstoppable, we've already taken Cyprus, Malta, Portugal, Poland, and Serbia by storm. Our BRO team consists of 1,300 bright minds creating innovative ideas and products. We don’t follow formats. We shape them. We build what works, launch it fast, and make sure it hits. We invite a Security Engineer. This is a full-time, office-based role (no remote/hybrid) in one of our hubs: Belgrade, Serbia Lisbon, Portugal Sofia, Bulgaria Warsaw, Poland The final location will depend on business needs and the feasibility of relocation from your current spot.
Responsibilities
- Manage security systems: DLP, XDR, Network VPN gateway.
- Implement and maintain security control policies to enhance security.
- Keep security system infrastructure updated and patched.
- Integrate security systems with new IT solutions and assets.
- Debug issues related to the security systems software - cooperate closely with vendor support.
- Continuously monitor network activity, systems load.
- Monitor and review vendor notifications about Saas security system maintenance, critical vulnerabilities, new releases and features.
- Identify and analyze potential threats and vulnerabilities in the security systems.
- Respond to security incidents and provide 2-3 levels of support for the SOC team, coordinating incident response efforts.
- Escalate incidents to other teams as necessary.
- Prepare tech documentation after implementation of new security controls, system configurations.
- Create basic instructions for security software for end users.
- Suggest improvements to security system configuration and incident mitigation.
- Participate in post-incident reviews and propose enhancements.
Requirements
- 5 years of experience in IT infrastructure administration or information security roles.
- Advanced administration of macOS, Windows, and Linux operating systems, including secure configuration, system hardening, access control management, and troubleshooting at the OS level.
- Understanding of networking fundamentals, including IP networking, routing, switching, and network protocol behaviour relevant to security analysis.
- Basic knowledge of regulatory requirements and standards such as ISO27001, ISO27701, PCI DSS, GDPR, and others.
- Administration and configuration of EDR/XDR platforms, including policy management, detection rule tuning, incident investigation, and endpoint threat response.
- Configuration and administration of enterprise VPN solutions, including secure remote access management, authentication policies, and network access control.
- Administration and tuning of DLP systems, including policy development, data classification integration, and monitoring of data exfiltration risks.
- Proficiency in working with any kind of simple scripts: bash, PowerShell or Python, etc..
- Understanding of the basic principles of virtualisation platform functionality.
- Experience in complex implementation or support projects of enterprise information security solutions (any solution classes from the list): MDM, SIEM, DLP, PAM, NGFW, Endpoint Security. Etc..
- Experience with deployment and administration of IDS/IPS solutions, including rule tuning and network threat detection.
- Experience with PaloAlto, Digital Guardian, OpenVPN security solutions.
Benefits
- Career growth opportunities in an international and dynamic environment.
- Opportunity to develop language skills with partial compensation for language courses.
- Special gifts for birthdays, weddings, and newborns.
- 20 working days of paid annual vacation, plus paid sick leave.
- Office snacks and refreshments.
- Sports package to support a healthy lifestyle.
- Comprehensive medical insurance for you and your partner.
- Comfortable office with great facilities in a prime location.
- Exciting corporate events, team-building activities, and international company parties.
