Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указанаразвернуть
На похожих ролях по рынку
$65к$69кмедиана$77к
26 в выборке
На СНГ рынке: $5.1к/мес ($3.7к - $6.7к)
78
Хорошая вакансия
развернуть
Обязанности для senior-уровня описаны ясно и дают широкий опыт в кибербезопасности, но охват сразу нескольких облаков и реагирование на инциденты под давлением могут создавать высокую нагрузку; индустрия iGaming подходит не всем.
Высокая нагрузка
Индустрия азартных игр
Актуальные технологии
Понятные обязанности
Ресурсы для обучения
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Security Analyst (AI) (Security Operations/iGaming): Leading incident response, threat hunting, detection engineering, and cloud security monitoring across enterprise environments with an accent on SIEM/EDR analysis, vulnerability management, and AI-assisted security operations. Focus on investigating complex attacks, developing detections across AWS, Azure, GCP, and Microsoft 365, validating response coverage, and reducing SOC response times.
Location: Poland; hybrid workplace
Company
hirify.global develops software, platforms, and services for the iGaming industry, with more than 2,500 professionals across over 12 locations and work delivered for Pragmatic Play.
What you will do
Lead complex security incident investigations through containment, eradication, recovery, root cause analysis, reporting, and lessons learned.
Monitor and investigate SIEM, EDR, cloud, endpoint, network, identity, and application telemetry; integrate log sources and improve security visibility.
Conduct threat hunting and develop, test, tune, and maintain SIEM and EDR detections, monitoring use cases, and response playbooks.
Investigate cloud security events across AWS, Azure, and GCP, including privilege escalation, exposed resources, anomalous activity, and identity threats.
Improve SOC efficiency through automation, scripting, detection validation, threat intelligence, and collaboration with Security Engineering, Infrastructure, and Red Team functions.
Track vulnerability remediation, assess emerging threats, communicate risks, mentor junior analysts, and investigate malicious or AI-assisted attacks.
Requirements
5+ years of experience in Security Operations, Incident Response, Threat Hunting, or Threat Detection, including at least 3 years with enterprise SIEM platforms.
Experience with SIEM query languages and developing or tuning SIEM and EDR detections; working knowledge of SOAR and vulnerability management technologies.
Experience investigating endpoint, network, identity, and cloud security incidents across AWS, Azure, GCP, and Microsoft 365.
Experience with Linux and understanding of Windows and container security concepts.
Experience operationalizing threat intelligence and knowledge of the Cyber Kill Chain and NIST Cybersecurity Framework principles.
Practical scripting experience with Python, PowerShell, or Bash.
Ability to work independently and make sound decisions during high-pressure incidents, with strong analytical, investigative, problem-solving, communication, and stakeholder-management skills.
Familiarity with AI-enabled Security Operations tools and investigating malicious AI usage and AI-assisted attacks.
Nice to have
Microsoft Security certifications such as SC-200, SC-100, or AZ-500.
GIAC certifications such as GCIH, GCFA, GCIA, GMON, or GREM.
AWS Certified Security – Specialty.
Culture & Benefits
Permanent contract with competitive salary based on skills and experience.
20 or 26 days of annual leave in accordance with applicable legislation.
Private medical insurance after successfully passing probation.
Access to the Learning Hub with online courses and career-development resources.
Multisport gym and fitness membership after successfully passing probation.
Hiring process
Submit a CV through the application process; applying takes about 10 minutes.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →