1 день назад
Information Security Specialist
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Information Security Specialist (Endpoint Security/SaaS): Managing operational security across endpoint protection, access management, vulnerability management, event monitoring, incident response, email security, and employee awareness with an accent on MDM, EDR, Google Workspace, and SaaS platforms. Focus on triaging security alerts, coordinating incident response, building security processes from scratch, and supporting SOC 2 certification.
Location: Remote; listed locations are Belgrade, Serbia and Tbilisi, Georgia
Company
is growing its security team and operates with a focus on trust, ownership, and practical execution.
What you will do
- Monitor MDM and EDR coverage, device inventory, policy compliance, and security gaps; escalate issues to IT Operations.
- Triage EDR, Google Workspace, and baseline security alerts, including isolation, severity-based escalation, and log maintenance.
- Monitor privileged and inactive accounts, MFA coverage, endpoint patching, critical CVEs, and vulnerability management activities.
- Review phishing reports, isolate emails, notify users, and manage Google Workspace blocking policies.
- Administer KnowBe4 training and phishing simulations, manage SaaS vendors, and track department-level metrics.
- Support incident handling, maintain timelines and incident logs, participate in SOC 2 certification, and help prepare security questionnaire responses.
Requirements
- 2–4 years of experience in information security or a related field such as IT or DevOps with a security focus.
- Hands-on experience working with SaaS platforms from a security or administration perspective.
- Understanding of access management, vulnerability management, endpoint protection, and event monitoring.
- Experience with MDM solutions and EDR.
- Ability to take ownership of tasks without a defined process and drive them to completion.
- Ability to build some processes from scratch.
- Comfort coordinating with cross-functional teams, setting requirements, and following up on execution.
Nice to have
- Google Workspace administration experience.
- Experience with security awareness platforms such as KnowBe4 or equivalent.
- Involvement in a SOC 2 or ISO 27001 certification process.
- Familiarity with CIS Controls or NIST CSF.
- Experience with process automation, including scripting, API integrations, or no-code/low-code tools.
Culture & Benefits
- Fully remote work from anywhere.
- USD compensation.
- 31 days of paid time off: 21 days of annual leave and 10 days of sick leave.
- Access to learning resources and growth opportunities.
- Virtual team events including cooking classes, yoga sessions, and team quizzes.
- Trust-based culture focused on ownership, open communication, results, and collaboration.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Музыка
Осень
Поддержка