Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
79
Хорошая вакансия
развернуть
Роль описана достаточно чётко и даёт заметную ответственность за киберзащиту и развитие команды, но сочетание практических задач и руководства делает нагрузку важным вопросом для обсуждения.
Кликните для подробной информации
Широкая зона ответственностиАктуальные практикиФинтех-секторБюджеты на развитие
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Cyber Defense Manager (Cybersecurity): Leading SOC operations, detection engineering, incident response, and exposure remediation across a fintech environment with an accent on alert quality, vulnerability prioritization, and security operations metrics. Focus on designing SIEM, EDR, and cloud detections, coordinating incident command, reducing MTTD/MTTR, and building a high-performing Cyber Defense team.
Location: Europe; remote work is available.
Company
hirify.global operates in the fintech sector.
What you will do
Own Cyber Defense execution across SOC operations, detection engineering, incident response, and exposure remediation.
Lead alert triage quality, escalation standards, incident command, response coordination, and MTTD/MTTR improvement.
Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact.
Coordinate with IT, Platform, IAM, Product, GRC, Legal, and business owners during incidents and remediation.
Build and develop the Cyber Defense team through hiring, onboarding, mentoring, retention, and continuous improvement.
Requirements
10+ years of experience in Information Security and 3+ years in a security management or team lead role with direct people management experience.
Hands-on experience managing SOC operations, leading incident command, and improving MTTD/MTTR.
Ability to design, validate, and maintain detection logic across SIEM, EDR, and cloud platforms, including runbook development and false-positive reduction.
Knowledge of attack scenarios including ATO, credential theft, privilege escalation, and data exfiltration, with the ability to map detections to MITRE ATT&CK threat models.
Experience prioritizing vulnerabilities using CVSS and asset criticality to reduce exposure aging.
Hands-on experience with at least one enterprise SIEM: Splunk, Microsoft Sentinel, Chronicle, or Elastic, plus SOAR tooling.
Understanding of cloud-native security controls and monitoring in AWS, GCP, or Azure.
Understanding of IAM, PAM, SSO, and identity-related attack vectors relevant to detection and response.
Ability to define, track, and communicate security KPIs and operational dashboards to technical and executive audiences.
English at Upper-Intermediate level or higher; fluent Ukrainian or Russian.
Nice to have
Experience in fintech, e-commerce, or other high-risk industries with complex threat landscapes.
Previous hands-on experience as a SOC analyst, incident responder, or detection engineer before moving into management.
Experience building a SOC or Cyber Defense function from scratch or significantly maturing an existing one.
Familiarity with threat intelligence platforms and threat-informed defense methodologies.
Relevant certifications such as CISSP, CISM, GIAC GSOM, GCED, GCIH, or equivalent.
Culture & Benefits
20 paid vacation days and 10 paid sick leave days per year.
Public holidays according to the company-approved holiday list.
Medical, professional education, language learning, and wellness budgets.
Remote work opportunity.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →